CVE-2020-29011

CVE-2020-29011 describes SQL injection in Fortinet FortiSandbox (checksum search and MTA-quarantine modules) affecting FortiSandbox 3.2.0–3.2.2 and 3.1.0–3.1.4. The root cause is inadequate input filtering in these modules, allowing an authenticated attacker to execute arbitrary code on the under...

CVE-2020-29011

Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execute unauthorized code on the underlying SQL interpreter via specifically crafted HTTP requests...