{"cvss":0.0,"datePublished":"2020-07-04T00:00:00Z","dateUpdated":"2020-07-04T00:00:00Z","description":"The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.","dueDate":"","id":"CVE-2018-7765","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"u.motion_builder","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Schneider Electric u.motion_builder Improper Neutralization of Special Elements used in an SQL Command","vendor":"Schneider Electric"}