---
id: 10216
title: "CVE-2023-48788: Fortinet FortiClient EMS SQL Injection Deep Dive"
cve: CVE-2023-48788
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/attack-blogs/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive/"
published_at: "2024-03-21T10:58:56Z"
tags: ["vulnerability-research", "sql-injection", "fortinet"]
phying_url: "https://phying.com/item/10216"
lang: en
---

# CVE-2023-48788: Fortinet FortiClient EMS SQL Injection Deep Dive

## Summary

CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Deep-Dive and Indicators of Compromise. This blog details the SQL injection which allows an unauthenticated attacker to access the FortiClient EMS server as SYSTEM to execute arbitrary commands.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2023-48788
- **Published:** 2024-03-21T10:58:56Z
- **Original:** https://horizon3.ai/attack-research/attack-blogs/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive/
- **Phying News:** https://phying.com/item/10216