medium6.5Public exploit code
CVE-2015-7901
Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Infinite Automation Mango Automation - Command Injection (Metasploit)2017-09-13 · remote · jsp · Verified
- Mango Automation 2.6.0 - Multiple Vulnerabilities2015-09-28 · webapps · jsp
Impact
Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infinite Automation Systems | Mango Automation | Versions 2.5.0, 2.5.5, 2.6.0 |