Identifying pages vulnerable to SQL Injection