CVE-2025-25257

CRITICALCVSS: 9.8

An improper neutralization of special elements used in an SQL command (SQLI) vulnerability [CWE-89] in Fortinet FortiWeb version 7.6.0

Published: 7/17/2025

Affected: Fortinet FortiWeb v7.6.0

REFERENCES

AVAILABLE_EXPLOITS(1)

Exploit for CVE-2025-3248

@sinsinology

7/17/2025

This code is strictly intended for educational and research purposes only.

#SQLi#Web#Critical

VERIFIED