CVE-2020-13119

ismartgate PRO 1.5.9 is vulnerable to clickjacking...

CVE-2020-12837

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used...

Cross site request forgery (csrf)

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

CVE-2020-12837

Affected product: iSmartgate PRO 1.5.9. Vulnerability: Malicious file uploads via the image upload form for garage doors. The attack requires the PNG magic bytes, indicating a crafted PNG payload could bypass basic checks. The reports consistently describe a vulnerability in the image upload path...