Description
Fortinet FortiWeb存在SQL注入漏洞，攻击者可以构造恶意sql语句并执行，获取数据库敏感信息以及权限。
Fortinet FortiWeb 存在SQL注入漏洞(CVE-2025-25257)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://fortiguard.fortinet.com/psirt/FG-IR-25-151
https://nvd.nist.gov/vuln/detail/CVE-2025-25257
https://labs.watchtowr.com/pre-auth-sql-injection-to-rce-fortinet-fortiweb-fabric-connector-cve-2025-25257/
https://zeropath.com/blog/fortinet-fortiweb-cve-2025-25257-sql-injection-rce
https://arcticwolf.com/resources/blog/cve-2025-25257/
https://www.rapid7.com/db/vulnerabilities/fortinet-fortiweb-cve-2025-25257/
https://www.greenbone.net/en/blog/cve-2025-25257-urgent-pre-auth-rce-in-fortiweb-fabric-connector/
https://www.cisecurity.org/advisory/a-vulnerability-in-fortiweb-could-allow-for-sql-injection_2025-063
https://github.com/0xbigshaq/CVE-2025-25257
https://thehackernews.com/2025/07/fortinet-releases-patch-for-critical.html