Fortinet FortiWeb SQL注入漏洞

2025-07-15 16:12:37 Fortinet FortiWeb PoC No

Description

Fortinet FortiWeb 存在SQL注入漏洞,该漏洞源于Fortinet FortiWeb Fabric Connector 组件在认证处理中没有严格校验输入参数,攻击者可在 Authorization: Bearer 头中注入恶意SQL语句,实现远程代码执行获取服务器权限。

影响版本:

7.6.0 <= FortiWeb <= 7.6.3

7.4.0 <= FortiWeb <= 7.4.7

7.2.0 <= FortiWeb <= 7.2.10

7.0.0 <= FortiWeb <= 7.0.10

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

Related Vulnerabilities