Concrete5 versions 5.7.4 and below suffer from a remote SQL injection vulnerability. Continue reading...