Fortinet FortiPortal SQL Injection Vulnerability

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet’s FortiGate, FortiWiFi, and FortiAP product lines that can be used as a virtual machine for MSPs. vulnerability, which stems from the product’s failure to adequately clean user-provided data. An attacker could exploit this vulnerability to send specially designed HTTP requests to affected applications and execute arbitrary SQL commands in the application database.