Show filters
11 Total Results
Displaying 1-10 of 11
Sort by:
Attacker Value
Unknown
CVE-2020-12838
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.
0
Attacker Value
Unknown
CVE-2020-12843
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.
0
Attacker Value
Unknown
CVE-2020-13119
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
ismartgate PRO 1.5.9 is vulnerable to clickjacking.
0
Attacker Value
Unknown
CVE-2020-12842
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php.
0
Attacker Value
Unknown
CVE-2020-12837
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used.
0
Attacker Value
Unknown
CVE-2020-12282
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)
0
Attacker Value
Unknown
CVE-2020-12840
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php
0
Attacker Value
Unknown
CVE-2020-12839
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.
0
Attacker Value
Unknown
CVE-2020-12841
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php
0
Attacker Value
Unknown
CVE-2020-12281
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.
0
