Fix SQL injection issue CVE-2013-3081