Security Advisory
CVE-2015-7904
6.5
Vulnerability Description
Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file.
Published Date
October 28, 2015
Official Source
NIST NVD Advisory