CVE-2020-12282

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php

published September 24, 2020

CVSS
—
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00496 · 41.6th percentile
Published
2020-09-24T15:10Z
EPSS history
Timeline
  • 24 SEP 15:10Z
    iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php
    cvelistv5