CVE-2024-55593

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to gain information disclosure via crafted SQL queries...

CVE-2024-55593

FortiWeb by Fortinet is affected by an SQL injection due to improper neutralization of special elements in SQL commands. Affected versions are FortiWeb 6.3.17 through 7.6.1, with information disclosure possible via crafted SQL queries. The vulnerability enables attackers who can log in to the For...

Fortinet FortiWeb sqli (FG-IR-24-465)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-465 advisory. - A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiWeb versions 6.3.17...