---
id: 10212
title: "CVE-2023-48788: Revisiting Fortinet FortiClient EMS to Exploit 7.2.X"
cve: CVE-2023-48788
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/attack-blogs/cve-2023-48788-revisiting-fortinet-forticlient-ems-to-exploit-7-2-x/"
published_at: "2024-06-04T11:42:14Z"
tags: ["vulnerability-research", "sql-injection", "exploit", "fortinet"]
phying_url: "https://phying.com/item/10212"
lang: en
---

# CVE-2023-48788: Revisiting Fortinet FortiClient EMS to Exploit 7.2.X

## Summary

Revisiting CVE-2023-48788, a SQL injection in Fortinet FortiClient EMS Server. This blog details bypassing several restrictions to achieve arbitrary command execution as SYSTEM.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2023-48788
- **Published:** 2024-06-04T11:42:14Z
- **Original:** https://horizon3.ai/attack-research/attack-blogs/cve-2023-48788-revisiting-fortinet-forticlient-ems-to-exploit-7-2-x/
- **Phying News:** https://phying.com/item/10212