PT-2020-13284

Name of the Vulnerable Software and Affected Versions ismartgate PRO version 1.5.9 Description The issue allows for privilege escalation by appending PHP code to the "/cron/mailAdmin.php" API endpoint. Recommendations For ismartgate PRO version 1.5.9, consider restricting access to the...

CVE-2020-12838: Incorrect Permission Assignment for Critical Resource

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php...