CVE-2018-7765

HIGH EXPLOITED NUCLEI

Schneider Electric U.motion Builder <1.3.4 - SQL Injection

Title source: llm

Description

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.

Nuclei Templates (1)

Schneider Electric U.motion Builder - SQL Injection
HIGHVERIFIEDby daffainfo
Shodan: http.headers_hash:1985490094

References (2)

Scores

CVSS v3 8.8
EPSS 0.0609
EPSS Percentile 90.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2020-07-04
CWE
CWE-89
Status published
Products (1)
schneider-electric/u.motion_builder < 1.3.4
Published Jul 03, 2018
Tracked Since Feb 18, 2026