EDB-38338
PoCMango Automation 2.6.0 - Multiple Vulnerabilities
Exploit ansehen Quelle exploit_dbTyp webappsAutor LiquidWormveröffentlicht 2015-09-28Katalog exploit_db
01
ausgenutzte CVEs (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2015-7904US | medium6.5 | Exploit | ||
Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP cod… | ||||
| CVE-2015-7903US | medium6.5 | Exploit | ||
SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via u… | ||||
| CVE-2015-7902US | medium5.0 | Exploit | ||
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows r… | ||||
| CVE-2015-7901US | medium6.5 | Exploit | ||
Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors. | ||||
| CVE-2015-7900US | medium4.3 | Exploit | ||
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger a… | ||||
| CVE-2015-6494US | low3.5 | Exploit | ||
Cross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to inject arbitrary web sc… | ||||
| CVE-2015-6493US | medium6.8 | Exploit | ||
Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to hijack the auth… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan