CVE-2020-29015 | BDVDB-2026-147603 Detail

Fortinet FortiWeb

Description#

A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to execute arbitrary SQL queries or commands by sending a request with a crafted Authorization header containing a malicious SQL statement.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.fortiguard.com/psirt/FG-IR-20-124

Exploit#

No public exploit known

History#

Version 12021-01-14Record published in the CVE List.
Version 22024-10-25Most recent update recorded in the CVE List.