description: The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter.
problem types: SQL Injection Remote Code Execution
affected:
{
product: U.Motion
vendor: Schneider Electric SE
versions:
status: affected, version: U.motion Builder Software, all versions prior to v1.3.4
}