https://www.systemtek.co.uk/2019/04/magento-sql-injection-vulnerability-cve-2019-7139/
Magento SQL Injection Vulnerability [CVE-2019-7139]