Aller au contenu
Se connecter
Non notée

CVE-2020-29015 A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an…

Description

A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to execute arbitrary SQL queries or commands by sending a request with a crafted Authorization header containing a malicious SQL statement.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiWeb Versions non publiées

Autres CVE de Fortinet FortiWeb

Les 3 CVE de Fortinet FortiWeb →
CVE-2020-29019 A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow a remote,… Non notée CVE-2020-6646 An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored… Non notée
Suivre cette CVE