CVE-2018-14058: Improper Neutralization of Special Elements used in an SQL Command

Pimcore before 5.3.0 allows SQL Injection via the REST web service API...