Mango Automation version 2.6.0 file upload and arbitrary JSP code execution cross site request forgery exploit.