Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2018-7766

The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Schneider-electric
Products
U.motion Builder
CVE-2018-7765

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Schneider-electric
Products
U.motion Builder
CVE-2018-7764

The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the 's' parameter of the applet.

CVSS 3.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Schneider-electric
Products
U.motion Builder
CVE-2018-7763

The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory traversal vulnerability.

CVSS 3.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Schneider-electric
Products
U.motion Builder