Gogogate 11 CVEs across 2 Gogogate products. Browse Gogogate vulnerabilities, severities, and proof-of-concept exploits.
Gogogate products with known CVEs Gogogate CVEs — newest first CVE Severity Score Published Summary CVE-2020-13119High 8.12020-09-24 ismartgate PRO 1.5.9 is vulnerable to clickjacking. CVE-2020-12843Critical 9.82020-09-24 ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used. CVE-2020-12842Critical 9.82020-09-24 ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php. CVE-2020-12841Medium 6.52020-09-24 ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php CVE-2020-12840Medium 6.52020-09-24 ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php CVE-2020-12839Critical 9.82020-09-24 ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php. CVE-2020-12838Critical 9.82020-09-24 ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php. CVE-2020-12837High 7.52020-09-24 ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used. CVE-2020-12282High 8.82020-09-24 iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined w… CVE-2020-12281Medium 6.52020-09-24 iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php. CVE-2020-12280Medium 6.52020-09-24 iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php.