CVE-2019-12723: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...