high8.0
CVE-2018-7771
The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4.
Impact
The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vulnerability allows a caller with standard user privileges to write arbitrary php files anywhere in the web service directory tree.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | U.Motion Builder | before 1.3.4 |