infinite automation systems mango automation vulnerabilities and exploits

(subscribe to this query)

Infinite Automation Mango Automation 2.5.x and 2.6.x prior to 2.6.0 build 430 allows remote malicious users to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page.

Infinite Automation Systems Mango Automation 2.5.5 Infinite Automation Systems Mango Automation 2.6.0 Infinite Automation Systems Mango Automation 2.5.0

1 EDB exploit

Infinite Automation Mango Automation 2.5.x and 2.6.x prior to 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote malicious users to obtain sensitive information via a series of requests.

Infinite Automation Systems Mango Automation 2.5.0 Infinite Automation Systems Mango Automation 2.5.5 Infinite Automation Systems Mango Automation 2.6.0

1 EDB exploit

Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x prior to 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file.

Infinite Automation Systems Mango Automation 2.5.5 Infinite Automation Systems Mango Automation 2.5.0 Infinite Automation Systems Mango Automation 2.6.0

1 EDB exploit

Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x up to and including 2.6.0 build 430 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Infinite Automation Systems Mango Automation 2.5.0 Infinite Automation Systems Mango Automation 2.6.0 Infinite Automation Systems Mango Automation 2.5.5

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x prior to 2.6.0 build 430 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Infinite Automation Systems Mango Automation 2.5.0 Infinite Automation Systems Mango Automation 2.5.5 Infinite Automation Systems Mango Automation 2.6.0

1 EDB exploit

Infinite Automation Mango Automation 2.5.x and 2.6.x up to and including 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.

Infinite Automation Systems Mango Automation 2.5.0 Infinite Automation Systems Mango Automation 2.5.5 Infinite Automation Systems Mango Automation 2.6.0

2 EDB exploits

SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x prior to 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Infinite Automation Systems Mango Automation 2.5.0 Infinite Automation Systems Mango Automation 2.5.5 Infinite Automation Systems Mango Automation 2.6.0

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) dpid, (2) dpxid, or (3) pid parameter.

Infinite Automation Systems Mango Automation

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook