Fortinet fixes critical FortiClientEMS SQL injection flaw (CVSS 9.1) enabling code execution; separate SSO bug actively exploited.

Hackers are attempting to hide SQL injection commands by disguising the data as a string of numbers. The latest technique has been used to compromise as many as a million webpages in the early part of ...