CVE-2017-11475

GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php...

PT-2017-12041

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.1.5.1 Description The issue concerns SQL Injection in the condition rule field of GLPI, which can be exploited via the "front/rulesengine.test.php" API endpoint. Recommendations For versions prior to 9.1.5.1, update to...

CVE-2017-11475: Improper Neutralization of Special Elements used in an SQL Command

GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php...