SQL Injection vulnerabilities have been discovered in the third party TYPO3 extension "Website Photo Gallery" (jm_gallery)