Vulnerabilities (CVE)

Filtered by vendor Gogogate Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-12837 1 Gogogate 2 Ismartgate Pro, Ismartgate Pro Firmware 2020-09-27 5.0 MEDIUM 7.5 HIGH
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used.
CVE-2020-13119 1 Gogogate 2 Ismartgate Pro, Ismartgate Pro Firmware 2020-09-27 4.3 MEDIUM 8.1 HIGH
ismartgate PRO 1.5.9 is vulnerable to clickjacking.
CVE-2020-12282 1 Gogogate 2 Ismartgate Pro, Ismartgate Pro Firmware 2020-09-27 6.8 MEDIUM 8.8 HIGH
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)