CVE-2018-7765

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4

published July 3, 2018

CVSS
—
EPSS
3%
Percentile
86.8
In the wild
Unconfirmed
What it is

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02917 · 86.8th percentile
Published
2018-07-03T14:00Z
EPSS history
Timeline
  • 03 JUL 14:00Z
    The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
    cvelistv5