PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2023-48788: Fortinet FortiClient EMS SQL Injection Deep Dive

horizon3.ai | vulnerability | CVE-2023-48788 | #vulnerability-research | #sql-injection | #fortinet
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Deep-Dive and Indicators of Compromise. This blog details the SQL injection which allows an unauthenticated attacker to access the FortiClient EMS server as SYSTEM to execute arbitrary commands.
CVE
CVE-2023-48788
Published
Collected

Related coverage

vulnerability · horizon3.ai
CVE-2023-48788: Revisiting Fortinet FortiClient EMS to Exploit 7.2.X
Revisiting CVE-2023-48788, a SQL injection in Fortinet FortiClient EMS Server. This blog details bypassing several restrictions to achieve arbitrary command execution as SYSTEM.
vulnerability · horizon3.ai
Fortinet FortiWLM Deep-Dive, IOCs, and the Almost Story of the “Forti Forty”
FortiWLM Deep Dive and Indicators of Compromise. This blog details the discovery of many critical security issues such as RCE, SQLi, and file reads leading to full device compromise. CVE-2023-34993, CVE-2023-34991, CVE-2023-42783, CVE-2023-34989.
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
vulnerability · horizon3.ai
CVE-2020-35700: Exploiting a Second-Order SQL Injection in LibreNMS < 21.1.0
# CVE-2020-35700: Exploiting a Second-Order SQL Injection in LibreNMS * * * ##### How can NodeZero help you? Let our experts walk you through a demonstration of NodeZero®, so you can see how to...
vulnerability · horizon3.ai
CVE-2020-29437: Authenticated SQL Injection in OrangeHRM < 4.6.0.1
OrangeHRM is software for Human Resource Management (HRM). In a routine audit of the open source version of OrangeHRM, we discovered a SQL injection…
vulnerability · horizon3.ai
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Horizon3 analyzes CVE-2026-106173, a critical FortiSIEM gRPC vulnerability enabling unauthenticated path traversal, arbitrary file writes, and code execution.
Back