Lucene search
FortiGuard LabsFG-IR-21-084HistoryAug 03, 2021 - 12:00 a.m.
FortiPortal - Pervasive SQL injections
2021-08-0300:00:00
FortiGuard Labs
www.fortiguard.com
6
0.001 Low
EPSS
Percentile
43.3%
Multiple improper neutralization of special elements used in an SQL command vulnerabilities (CWE-89) in FortiPortal may allow an attacker with regular user’s privileges to execute arbitrary commands on the underlying SQL database via specifically crafted HTTP requests.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortiportal | eq | 6.0.4 | |
| fortiportal | eq | 6.0.3 | |
| fortiportal | eq | 6.0.2 | |
| fortiportal | eq | 6.0.1 | |
| fortiportal | eq | 6.0.0 | |
| fortiportal | eq | 5.3.5 | |
| fortiportal | eq | 5.3.4 | |
| fortiportal | eq | 5.3.3 | |
| fortiportal | eq | 5.3.2 | |
| fortiportal | eq | 5.3.1 |
Related
prion
prion
Command injection
2021-08-04 14:15:00
cve
cve
CVE-2021-32590
2021-08-04 14:15:08
nvd
nvd
CVE-2021-32590
2021-08-04 14:15:08
cnvd
cnvd
Fortinet FortiPortal SQL Injection Vulnerability
2021-08-04 00:00:00
d0znpp
d0znpp
A1:Injection — Top 10 OWASP 2017
2021-09-08 05:24:20
cvelist
cvelist
CVE-2021-32590
2021-08-04 13:31:30