CVE-2019-15572

Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php...

CVE-2019-15572

The CVE-2019-15572 entry describes an SQL injection in Gesior-AAC’s shop.php, affecting versions prior to 2019-05-01. Root cause cited in CNVD-2019-31345 notes lack of validation for externally entered SQL statements in database-driven apps, enabling an attacker to execute arbitrary SQL commands....