Fortinet FortiVoice Enterprise SQL Injection Vulnerability

A blind SQL injection vulnerability has been identified in Fortinet FortiVoice Enterprise versions 7.0.0 through 7.0.1 and prior to 6.4.8. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing an authenticated attacker to execute crafted HTTP or HTTPS requests that exploit this weakness.

Impact

Exploitation of this vulnerability allows for blind SQL injection, where an authenticated attacker can manipulate SQL queries and potentially access or modify database information.