Description
A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
U.motion U.motion Builder software version 1.3.4
U.motion Builder software version 1.3.4affected
References
- http://packetstormsecurity.com/files/152862/Schneider-Electric-U.Motion-Builder-1.3.4-Command-Injection.html ↗
- http://seclists.org/fulldisclosure/2019/May/26 ↗
- https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-071-02 ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7841 ↗