CVE-2020-12842

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

CVE-2020-12842: Incorrect Permission Assignment for Critical Resource

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

PT-2020-13288

Name of the Vulnerable Software and Affected Versions ismartgate PRO version 1.5.9 Description The issue allows for privilege escalation by appending PHP code to the "/cron/checkUserExpirationDate.php" API endpoint. Recommendations For ismartgate PRO version 1.5.9, consider restricting access to...