Concrete5 5.7.4 SQL Injection

Concrete5 versions 5.7.4 and below suffer from a remote SQL injection vulnerability.