A critical security vulnerability, CVE-2025-25257, has been discovered in FortiWeb web application firewalls, potentially allowing unauthenticated attackers to execute unauthorized SQL commands. This vulnerability, classified as CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), poses a significant threat to organizations that rely on FortiWeb for web application security. Vulnerability and Exploit Details […]
The post Token Based SQLi in FortiWeb: Users Urged to Patch this Critical Flaw appeared first on SecPod Blog.