VULNERABILITY INTELLIGENCE

CVE-2015-7903

CVSS score6.5 MEDIUM

EPSS probability1.29%

CISA KEVNot currently listed

Published2015-10-28

Last modified2026-06-17

CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Weakness classification

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Primary references

ics-cert@hq.dhs.gov — Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource