Security Concrete5 5.7.4 SQL Injection June 11, 2015 007admin Leave a comment Concrete5 versions 5.7.4 and below suffer from a remote SQL injection vulnerability.