On Thursday, Fortinet released an update for FortiWeb. Exploits have emerged that abuse the critical gap.

The database is not immediately accessed directly, but threat actors learn enough about a system to work out what they want to know. Blind SQL injections are also known as inferential SQL injections, ...