CVE-2023-48791

An improper neutralization of special elements used in a command 'Command Injection' vulnerability CWE-77 in FortiPortal version 7.2.0, version 7.0.6 and below may allow a remote authenticated attacker with at least R/W permission to execute unauthorized commands via specifically crafted argument...

CVE-2023-48791

An improper neutralization of special elements used in a command 'Command Injection' vulnerability CWE-77 in FortiPortal version 7.2.0, version 7.0.6 and below may allow a remote authenticated attacker with at least R/W permission to execute unauthorized commands via specifically crafted argument...

PT-2023-8080

Name of the Vulnerable Software and Affected Versions FortiPortal versions 7.0.0 through 7.2.0 Description The issue is related to an improper neutralization of special elements used in a command, which may allow a remote authenticated attacker with at least R/W permission to execute unauthorized...