Fixed SQLi#exploit_url specs by adding #place_holder.