Known CVE

Fortinet FortiWeb - SQL Injection

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPS requests.

CVE-2025-25257

Critical2025CVSS 9.8CWE-89

cve2025 · fortinet · fortiweb · sqli · unauth · kev · vkev · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website