CVE-2020-12843

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used...

CVE-2020-12838

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php...

CVE-2020-12838

The CVE-2020-12838 entry concerns ismartgate PRO 1.5.9. The vulnerability enables privilege escalation by appending PHP code to /cron/mailAdmin.php, affecting multiple disclosures (Red Hat, NVD, CNVD, etc.). The risk is described as high/critical in CVSS terms (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2020-12842

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

CVE-2020-12842

CVE-2020-12842 affects ismartgate PRO 1.5.9. Red Hat and CNVD entries describe a privilege-escalation in /cron/checkUserExpirationDate.php via appended PHP code. No exploitation details are provided in the connected documents. Impact is described as privilege escalation; remediation is not specif...

CVE-2020-12839

The CVE-2020-12839 entry applies to ismartgate PRO 1.5.9, where a privilege escalation flaw is triggered by appending PHP code to the file /cron/checkExpirationDate.php. The NVD metrics show a high to critical impact (C/H/I/A) with network attack vector and no authentication, indicating a severe ...

CVE-2020-12839

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php...

CVE-2020-12837

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used...

CVE-2020-12837

Affected product: iSmartgate PRO 1.5.9. Vulnerability: Malicious file uploads via the image upload form for garage doors. The attack requires the PNG magic bytes, indicating a crafted PNG payload could bypass basic checks. The reports consistently describe a vulnerability in the image upload path...

CVE-2020-12280

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php...

CVE-2020-12280

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php...

Cross site request forgery (csrf)

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php...

CVE-2020-12840

CVE-2020-12840 affects ismartgate PRO 1.5.9. The Red Hat and other connected records corroborate a CSRF vulnerability that allows remote attackers to upload sound files via /index.php. The CVE entries consistently describe ismartgate PRO 1.5.9 as vulnerable to CSRF, enabling arbitrary file upload...

CVE-2020-12840

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php...

CVE-2020-12841

CVE-2020-12841 affects ismartgate PRO 1.5.9. The vulnerability is a CSRF flaw that allows remote attackers to upload image files via /index.php. The available connected sources confirm the affected product and the specific impact, but no exploitation details or fixes are provided. The issue is do...

CVE-2020-12841

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php...

CVE-2020-12282

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

CVE-2020-12282

CVE-2020-12282 affects iSmartgate PRO 1.5.9. The issue is a CSRF vulnerability in the form used to search for users, via the busca parameter in /index.php, which can be combined with a reflected XSS vulnerability. The connected Red Hat/CNVD/CVE entries reiterate the same description. The document...

CVE-2020-12281

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php...

CVE-2020-12281

Affected product : iSmartgate PRO 1.5.9. Vulnerability : CSRF that allows remote attackers to create a new user via /index.php. Evidence : Descriptions in CVE records (NVD, Red Hat, PRION, CVELIST) consistently state the CSRF flaw and the /index.php user-creation vector. Impact : Account creation...