CVE-2017-11475: Improper Neutralization of Special Elements used in an SQL Command

GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php...