CVE-2015-7900

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page.

• CWE-200

• https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02Patch, Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02Patch, Third Party Advisory, US Government Resource

Published

Oct 28, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7894The DCMProvider service in Samsung LibQjpeg on a Samsung SM-…
• CVE-2015-7895Samsung Gallery on the Samsung Galaxy S6 allows local users …
• CVE-2015-7896LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR…
• CVE-2015-7897The media scanning functionality in the face recognition lib…
• CVE-2015-7898Samsung Gallery in the Samsung Galaxy S6 allows local users …
• CVE-2015-7899The com_content component in Joomla! 3.x before 3.4.5 does n…
• CVE-2015-7901Infinite Automation Mango Automation 2.5.x and 2.6.x through…
• CVE-2015-7902Infinite Automation Mango Automation 2.5.x and 2.6.x before …
• CVE-2015-7903SQL injection vulnerability in Infinite Automation Mango Aut…
• CVE-2015-7904Unrestricted file upload vulnerability in Infinite Automatio…
• CVE-2015-7905Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote at…
• CVE-2015-7906LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 …