Mango Automation Security Vulnerabilities and Issues — Mango Automation CVE List

Lucene search

Infinite Automation SystemsMango Automation

4 matches found

CVE•added 2015/10/28 10:59 a.m.•40 views

CVE-2015-6493

Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

6.8CVSS6.8AI score0.0018EPSS

CVE•added 2015/10/28 10:59 a.m.•40 views

CVE-2015-7904

Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file.

6.5CVSS7.3AI score0.02855EPSS

CVE•added 2015/10/28 10:59 a.m.•36 views

CVE-2015-7901

Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.

6.5CVSS7.3AI score0.02816EPSS

CVE•added 2015/10/28 10:59 a.m.•29 views

CVE-2015-7903

SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

6.5CVSS8.2AI score0.00256EPSS