'To find this kind of vulns
http://thedailywtf.com/Articles/Oklahoma-
Leaks-Tens-of-Thousands-of-Social-Security-Numbers,-Other-
Sensitive-Data.aspx
:return: True if the parameter value contains SQL sentences'

def _analyze_SQL(self, request, response, ref, token_name, token_value):

    for match in SQL_RE.findall(token_value):
        if request.sent(match):
            continue
        desc = 'The    URI:    "%s"    has    a    parameter    named:    "%s"    with    value:    "%s",    which    is    a    SQL    query.'
        desc %= (response.get_uri(), token_name, token_value)
        v = Vuln('Parameter    has    SQL    sentence', desc, severity.LOW, response.id, self.get_name())
        v['parameter_value'] = token_value
        v.add_to_highlight(token_value)
        v.set_uri(ref)
        self.kb_append(self, 'strange_parameters', v)
        return True
    return False
