EUVD-2018-19478

Malware in sbrugna...

CVE-2018-7766

The vulnerability exists within processing of trackgetdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter...

CVE-2018-7766

The vulnerability exists within processing of trackgetdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter...

CVE-2018-7766

The CVE-2018-7766 vulnerability affects Schneider Electric U.motion Builder software prior to v1.3.4. It is caused by an SQL injection in the underlying SQLite query during processing of track_getdata.php, using the id input parameter. Reported impacts per the entry include high CVSS3 base metric...

CVE-2018-7766: Improper Neutralization of Special Elements used in an SQL Command

The vulnerability exists within processing of trackgetdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter...