A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 up to and including 8.6.5 and 8.5.0 up to and including 8.5.4 and 8.4.0 up to and including 8.4.2 and 8.3.0 up to and including 8.3.2 and 8.2.2 allows malicious user to execute unauthorized code or commands via a crafted http request.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
fortinet fortiwlm 8.2.2 |
||
fortinet fortiwlm |
||
fortinet fortiwlm 8.3.0 |
||
fortinet fortiwlm 8.3.1 |
||
fortinet fortiwlm 8.3.2 |
||
fortinet fortiwlm 8.4.0 |
||
fortinet fortiwlm 8.4.1 |
||
fortinet fortiwlm 8.4.2 |
Vulmon