You know what I just realized?

Why are you using TWO Command objects? Why are you putting the SQL into 1 object, then the parameters in to the other?

You need to use one or the other.