Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php.Referenceshttps://github.com/marcomoa/gesior-aac/pull/11