CVE-2015-7903

SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

• CWE-89

• https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02Patch, Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02Patch, Third Party Advisory, US Government Resource

Published

Oct 28, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7897The media scanning functionality in the face recognition lib…
• CVE-2015-7898Samsung Gallery in the Samsung Galaxy S6 allows local users …
• CVE-2015-7899The com_content component in Joomla! 3.x before 3.4.5 does n…
• CVE-2015-7900Infinite Automation Mango Automation 2.5.x and 2.6.x before …
• CVE-2015-7901Infinite Automation Mango Automation 2.5.x and 2.6.x through…
• CVE-2015-7902Infinite Automation Mango Automation 2.5.x and 2.6.x before …
• CVE-2015-7904Unrestricted file upload vulnerability in Infinite Automatio…
• CVE-2015-7905Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote at…
• CVE-2015-7906LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 …
• CVE-2015-7907Directory traversal vulnerability in the web server on Honey…
• CVE-2015-7908Honeywell Midas gas detectors before 1.13b3 and Midas Black …
• CVE-2015-7909Stack-based buffer overflow in Hospira Communication Engine …