PT-2020-13285

Name of the Vulnerable Software and Affected Versions ismartgate PRO version 1.5.9 Description The issue allows for privilege escalation by appending PHP code to the "/cron/checkExpirationDate.php" API endpoint. Recommendations For ismartgate PRO version 1.5.9, consider restricting access to the...

CVE-2020-12839: Incorrect Permission Assignment for Critical Resource

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php...