PT-2018-18270

Name of the Vulnerable Software and Affected Versions: Schneider Electric U.motion Builder versions prior to 1.3.4 Description: The issue exists in the processing of nfcserver.php, where the underlying SQLite database query is subject to SQL injection on the sessionid input parameter...