During an external pentesting, a critical OS Command Injection vulnerability was identified by our team in a Fortinet SSL VPN web interface, specifically through manipulation of the lang (language) parameter.
The post OS Command Injection via ‘lang’ Parameter in Fortinet VPN SSL Interface first appeared on Black Hat Ethical Hacking.
SOCIAL SHARE CARD GENERATOR