CVE-2019-6295: Improper Neutralization of Special Elements used in an SQL Command

Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...