iSmartgate PRO Malicious File Upload Vulnerability

The iSmartgate PRO is a smart garage door opening system. A malicious file upload vulnerability exists in iSmartgate PRO 1.5.9. An attacker can exploit this vulnerability to upload a malicious file via a form that uploads an image to the garage door...

iSmartgate PRO Cross-Site Request Forgery Vulnerability (CNVD-2021-01047)

The iSmartgate PRO is a smart garage door opening system. A cross-site request forgery vulnerability exists in iSmartgate PRO 1.5.9. An attacker can exploit this vulnerability to conduct a cross-site request forgery attack via the busca parameter in a form used to search for users...

ismartgate PRO /cron/checkUserExpirationDate.php Elevation of Privilege Vulnerability

iSmartGate is a smart garage door opener system. A security vulnerability exists in ismartgate PRO /cron/checkUserExpirationDate.php, which allows remote attackers to exploit the vulnerability to submit special requests that can elevate privileges...

ismartgate PRO Cross-Site Request Forgery Vulnerability (CNVD-2021-01053)

iSmartGate is a smart garage door opener system. The ismartgate PRO suffers from a cross-site request forgery vulnerability that allows a remote attacker to exploit the vulnerability to construct a malicious URI, bait a request, and can perform a malicious operation in the context of the target...

ismartgate PRO File Upload Vulnerability

iSmartGate is a smart garage door opener system. A security vulnerability exists in ismartgate PRO version 1.5.9, which can be exploited by attackers to conduct privilege escalation attacks by appending PHP code to /cron/mailAdmin.php...

ismartgate PRO Clickjacking Vulnerability

iSmartGate is a smart garage door opener system. A clickjacking vulnerability exists in ismartgate PRO, which allows remote attackers to exploit the vulnerability to submit a special URL request that can be parsed by the user, which can be used to gain access to sensitive information, among other...

ismartgate PRO File Upload Vulnerability (CNVD-2021-01055)

iSmartGate is a smart garage door opener system. The ismartgate PRO has a security vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request to upload a malicious file to the system...

CVE-2020-12842

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

CVE-2020-12843

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used...

CVE-2020-13119

ismartgate PRO 1.5.9 is vulnerable to clickjacking...

CVE-2020-12842

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php...

CVE-2020-12840

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php...

CVE-2020-12841

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php...

CVE-2020-12837

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used...

CVE-2020-12839

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php...

CVE-2020-12841

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php...

CVE-2020-12838

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php...

CVE-2020-12281

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php...

CVE-2020-12840

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php...

CVE-2020-12282

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...