Lucene search
FortiGuard LabsFG-IR-21-129HistoryDec 07, 2021 - 12:00 a.m.
FortiWLM - SQL Injection in script handlers
2021-12-0700:00:00
FortiGuard Labs
www.fortiguard.com
11
fortiwlm
sql injection
vulnerability
EPSS
0.001
Percentile
37.0%
An improper neutralization of special elements used in an SQL Command (‘SQL Injection’) vulnerability [CWE-89] in FortiWLM may allow an unauthenticated user to taint database data and extract sensitive informations via crafted HTTP requests to alarm and device handlers.
Related
cvelist
cvelist
CVE-2021-42760
2021-12-08 11:31:41
nvd
nvd
CVE-2021-42760
2021-12-08 12:15:07
prion
prion
Sql injection
2021-12-08 12:15:00
cnvd
cnvd
Fortinet FortiWLM SQL Injection Vulnerability (CNVD-2022-02764)
2021-12-09 00:00:00
cve
cve
CVE-2021-42760
2021-12-08 12:15:07