TI-2020-10312 CVE-2020-13119 · GHSA-fvcc-fp3f-7c6c
ismartgate PRO 1.5.9 is vulnerable to clickjacking.
Priority LOW 37
ismartgate PRO 1.5.9 is vulnerable to clickjacking.
Vulnerabilities
11 records
TI-2020-10209 CVE-2020-12843 · GHSA-h7mg-9xr4-w524
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading…
Priority MEDIUM 45
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors.
TI-2020-10204 CVE-2020-12838 · GHSA-pj9p-w8rm-cvj3
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.
Priority MEDIUM 45
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.
TI-2020-10208 CVE-2020-12842 · GHSA-6c3c-w7cf-ccf5
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php.
Priority MEDIUM 45
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php.
TI-2020-10205 CVE-2020-12839 · GHSA-h8fx-4qrr-fwv4
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.
Priority MEDIUM 45
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.
TI-2020-10203 CVE-2020-12837 · GHSA-wcpp-58jv-4c64
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading…
Priority LOW 35
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors.
TI-2020-10206 CVE-2020-12840 · GHSA-5c5v-3qwm-2cr8
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php
Priority LOW 29
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php
TI-2020-10207 CVE-2020-12841 · GHSA-9qqq-hp54-hq2g
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php
Priority LOW 29
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php
TI-2020-09814 CVE-2020-12282 · GHSA-7945-j4f2-7xcp
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for…
Priority LOW 39
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php.
TI-2020-09813 CVE-2020-12281 · GHSA-fgh5-3w2j-x3v9
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.
Priority LOW 29
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.
TI-2020-09812 CVE-2020-12280 · GHSA-pxh5-999h-73g5
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a…
Priority LOW 29
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php.