ID | CVSS | Summary | Last (major) update | Published | |
CVE-2020-12842 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php.
|
27-09-2020 - 22:37 | 24-09-2020 - 16:15 | |
CVE-2020-12280 | 4.3 |
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php.
|
27-09-2020 - 22:15 | 24-09-2020 - 15:15 | |
CVE-2020-12841 | 4.3 |
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php
|
27-09-2020 - 22:53 | 24-09-2020 - 16:15 | |
CVE-2020-12843 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.
|
27-09-2020 - 22:35 | 24-09-2020 - 16:15 | |
CVE-2020-12837 | 5.0 |
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used.
|
27-09-2020 - 23:10 | 24-09-2020 - 16:15 | |
CVE-2020-12282 | 6.8 |
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)
|
27-09-2020 - 22:27 | 24-09-2020 - 16:15 | |
CVE-2020-12839 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.
|
27-09-2020 - 23:00 | 24-09-2020 - 16:15 | |
CVE-2020-12838 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.
|
27-09-2020 - 23:03 | 24-09-2020 - 16:15 | |
CVE-2020-13119 | 4.3 |
ismartgate PRO 1.5.9 is vulnerable to clickjacking.
|
27-09-2020 - 22:29 | 24-09-2020 - 16:15 | |
CVE-2020-12281 | 4.3 |
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.
|
27-09-2020 - 22:15 | 24-09-2020 - 16:15 | |
CVE-2020-12840 | 4.3 |
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php
|
27-09-2020 - 22:55 | 24-09-2020 - 16:15 | |
CVE-2020-12841 | 4.3 |
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php
|
27-09-2020 - 22:53 | 24-09-2020 - 16:15 | |
CVE-2020-12840 | 4.3 |
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php
|
27-09-2020 - 22:55 | 24-09-2020 - 16:15 | |
CVE-2020-12282 | 6.8 |
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)
|
27-09-2020 - 22:27 | 24-09-2020 - 16:15 | |
CVE-2020-12837 | 5.0 |
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used.
|
27-09-2020 - 23:10 | 24-09-2020 - 16:15 | |
CVE-2020-12838 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.
|
27-09-2020 - 23:03 | 24-09-2020 - 16:15 | |
CVE-2020-13119 | 4.3 |
ismartgate PRO 1.5.9 is vulnerable to clickjacking.
|
27-09-2020 - 22:29 | 24-09-2020 - 16:15 | |
CVE-2020-12280 | 4.3 |
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php.
|
27-09-2020 - 22:15 | 24-09-2020 - 15:15 | |
CVE-2020-12839 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.
|
27-09-2020 - 23:00 | 24-09-2020 - 16:15 | |
CVE-2020-12842 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php.
|
27-09-2020 - 22:37 | 24-09-2020 - 16:15 | |
CVE-2020-12281 | 4.3 |
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.
|
27-09-2020 - 22:15 | 24-09-2020 - 16:15 | |
CVE-2020-12843 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.
|
27-09-2020 - 22:35 | 24-09-2020 - 16:15 | |
CVE-2020-12280 | 4.3 |
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php.
|
27-09-2020 - 22:15 | 24-09-2020 - 15:15 | |
CVE-2020-12282 | 6.8 |
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)
|
27-09-2020 - 22:27 | 24-09-2020 - 16:15 | |
CVE-2020-12281 | 4.3 |
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.
|
27-09-2020 - 22:15 | 24-09-2020 - 16:15 | |
CVE-2020-12837 | 5.0 |
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used.
|
27-09-2020 - 23:10 | 24-09-2020 - 16:15 | |
CVE-2020-12842 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php.
|
27-09-2020 - 22:37 | 24-09-2020 - 16:15 | |
CVE-2020-12839 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.
|
27-09-2020 - 23:00 | 24-09-2020 - 16:15 | |
CVE-2020-12840 | 4.3 |
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php
|
27-09-2020 - 22:55 | 24-09-2020 - 16:15 | |
CVE-2020-12838 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.
|
27-09-2020 - 23:03 | 24-09-2020 - 16:15 | |
CVE-2020-13119 | 4.3 |
ismartgate PRO 1.5.9 is vulnerable to clickjacking.
|
27-09-2020 - 22:29 | 24-09-2020 - 16:15 | |
CVE-2020-12841 | 4.3 |
ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php
|
27-09-2020 - 22:53 | 24-09-2020 - 16:15 | |
CVE-2020-12843 | 7.5 |
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.
|
27-09-2020 - 22:35 | 24-09-2020 - 16:15 |