CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 6.0
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: the vulnerability exists within processing of editscript.php in schneider electric u.motion builder software versions prior to v1.3.4. a directory traversal vulnerability allows a caller with standard user privileges to write arbitrary php files anywhere in the web service directory tree.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-07-03
Last Modified Date: 2018-08-28