pimcore is vulnerable to SQL Injection

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...