high8.8
CVE-2020-12282
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php.
Impact
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gogogate | Ismartgate Pro Firmware | Version 1.5.9 |