Browsing Category SQL injection vulnerability