CVE-2023-37931
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entreprise version 7.0.0 through 7.0.1 and before 6.…
Published: 2025-01-14 · CVSS: 8.6 · CVSS 3.1
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to perform a blind sql injection attack via sending crafted HTTP or HTTPS requests
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7