added sql injection CWE89 test cases