You're missing apostrophes (single quotes) for string insert
Consider using String.Format for your query or better yet parametrized query or the best stored procedure.
string wpInsertQuery = String.Format("Insert into WhitePaper_Table ([FileNm],[FileSz]) values('{0}','{1}')", FileNm, FileSz)
;
See how you can read it easier without all the plusses and closing and opening the quotes? And you see exactly how it looks before sending it to the database.
That said, if you absolutely have to have database code in your code instead of stored procedure, set a breakpoint right after the query string and copy its content into your database console and try to execute it. Correct whatever errors you have and then return it to the code.
If this helpls please take time to accept the solution. Thank you.