dotCMS versions 3.6.1 and below suffer from a remote blind boolean SQL injection vulnerability. Continue reading...