Fortinet updates web application firewall to protect against SQL injection, denial-of-service attacks

This vulnerability in the user interface of FortiWeb allowed an unauthenticated, remote attacker to execute arbitrary SQL queries or commands before it was resolved, an advisory from Fortinet admits.