Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2018-7765

CWE-89 — SQL Injection6 documents6 sources

Severity

8.8HIGH

EPSS

4.6%

top 10.78%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Schneider-electric U.motion Builder Schneider Electric SE U.motion

Timeline

PublishedJul 3

Latest updateMay 14

Description

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDschneider-electric/u.motion_builder< 1.3.4

▶CVEListV5schneider_electric_se/u.motionU.motion Builder Software, all versions prior to v1.3.4

🔴Vulnerability Details

GHSA

GHSA-4j9f-8935-x53p: The vulnerability exists within processing of track_import_export↗2022-05-14

▶

CVEList

CVE-2018-7765: The vulnerability exists within processing of track_import_export↗2018-07-03

▶

VulnCheck

Schneider Electric u.motion_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')↗2018

▶

💥Exploits & PoCs

Nuclei

Schneider Electric U.motion Builder - SQL Injection

▶

💬Community

Bugzilla

CVE-2018-9838 ocaml: Integer overflow in byterun/bigarray.c:caml_ba_deserialize() allows remote attackers to cause a denial of service or other unspecified impact↗2018-04-10

▶