Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the target server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Schneider Electric U.motion Builder软件安全漏洞
Vulnerability Description
Schneider Electric U.motion Builder software是法国施耐德电气（Schneider Electric）公司的一套为U.motion（楼宇自动化管理设备）创建自动化程序的工具。 Schneider Electric U.motion Builder软件1.3.4之前版本中的update_module.php文件存在安全漏洞，该漏洞源于程序没有充分的处理‘update_file’请求参数。远程攻击者可通过向目标服务器发送特制的请求利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A