Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Gogogate records in CISA KEVNo Gogogate vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 45
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01308 · Published 2020-09-24 · No fix listed CWE-434
Priority MEDIUM 45
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01546 · Published 2020-09-24 · No fix listed CWE-732
Priority MEDIUM 45
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01546 · Published 2020-09-24 · No fix listed CWE-732
Priority MEDIUM 45
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01546 · Published 2020-09-24 · No fix listed CWE-732
Priority LOW 39
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00496 · Published 2020-09-24 · No fix listed CWE-352
Priority LOW 37
ismartgate PRO 1.5.9 is vulnerable to clickjacking.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00834 · Published 2020-09-24 · No fix listed CWE-1021
Priority LOW 35
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00931 · Published 2020-09-24 · No fix listed CWE-434
Priority LOW 29
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00494 · Published 2020-09-24 · No fix listed CWE-352
Priority LOW 29
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00494 · Published 2020-09-24 · No fix listed CWE-352
Priority LOW 29
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00494 · Published 2020-09-24 · No fix listed CWE-352
Priority LOW 29
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00494 · Published 2020-09-24 · No fix listed CWE-352
THREATIST.IORead the docs