CVE-2024-35278

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgvhz4hk2t 2025-01-14 15:13:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113827355154551054 2025-01-14 17:21:21+00:00| seen|...

CVE-2024-35278

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiPortal versions 7.2.4 through 7.2.0 and 7.0.0 through 7.2.8 may allow an authenticated attacker to view the SQL query being run server-side when submitting an HTTP request, via including special...

CVE-2024-35278

Fortinet FortiPortal exposes a SQL injection vulnerability (CVE-2024-35278) due to improper neutralization of special elements in SQL commands. Affected versions are FortiPortal 7.2.4–7.2.0 and 7.0.0–7.2.8. An authenticated attacker can view the SQL query being executed on the server by manipulat...