Fortinet FortiWeb SQL Injection Vulnerability
CVSS Skor
—
EPSS İhtimal
%99.8
Risk Skoru
—
Yayın
1 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution
Nuclei: Fortinet FortiWeb - SQL Injection
PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi via the Authorization header to write a webshell and gain RCE. No login required. Fully automated.
Exploiting the CVE-2025-25257 vulnerability in FortiWeb. This repository demonstrates secure pre-authenticated SQL injection.
This repository provides production-ready detection engineering content for **CVE-2025-25257**, a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. Successful exploitation can lead to Remote Code Execution without any prior authentication.
CVE‑2025‑25257 is a critical pre-authentication SQL injection vulnerability affecting Fortinet FortiWeb’s
CVE-2025-25257 PoC for educational use and/or authorised pentesting.
A working (at least for me :] ) exploit for CVE-2025-25257
Public PoC for CVE-2025-25257: FortiWeb pre-auth SQLi to RCE
İlgili Benzer Açıklar
Vulnerability in Fortinet FortiOS, FortiProxy, FortiSwitchManager
Vulnerability in Fortinet FortiOS
Out-of-bounds write in Fortinet Fortiproxy
Out-of-bounds write in Fortinet FortiProxy
OS command injection in Fortinet Fortisandbox
Vulnerability in Fortinet FortiSwitchManager
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-25257"