Description
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiClientEMS | 7.2.0 – ≤ 7.2.2, 7.0.1 – ≤ 7.0.10 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
FortiNet FortiClient Endpoint Management Server FCTID SQLi to RCE
exploit/windows/http/forticlient_ems_fctid_sqli
GitHub 1 repository
-
horizon3ai/CVE-2023-48788 ★ 54 · Mar 18, 2024
Fortinet FortiClient EMS SQL Injection
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Fortinet Forticlient Endpoint Management Server - SQL Injection network/cves/2023/CVE-2023-48788.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- WID-SEC-2024-0605 Fortinet FortiClientEMS: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Dec 18, 2024