EDB-47991
PoCSchneider Electric U.Motion Builder 1.3.4 - Authenticated Command Injection
view exploit source exploit_dbtype webappsauthor Cosmin Craciunpublished 2020-02-03catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7777US | high8.8 | Exploit | ||
The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan