Description Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php. References https://github.com/marcomoa/gesior-aac/pull/8