[SECURITY] SQL Injection Possibility in Extbase

The Extbase persistence layer is vulnerable to SQL injection
due to improper sanitation of submitted arguments on relations
of the many-to-many type.

Fixes: #46057
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Change-Id: Ie5c9cf4a54260db937975edef61d464ddc808475
Security-Commit: 88fcf40028f0378948fd3572847a577aa91aaf76
Security-Bulletin: TYPO3-CORE-SA-2013-001
Reviewed-on: https://review.typo3.org/18735
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader