CVE-2021-24007

Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests...

CVE-2021-24007

CVE-2021-24007 affects Fortinet FortiMail. The FortiMail SQL Injection vulnerabilities are due to multiple improper neutralization of special elements of SQL commands, allowing a non-authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests. The issue is ...