PatchTheCVE: ismartgate pro firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-13119: ismartgate PRO 1.5.9 is vulnerable to clickjacking.https://patchthecve.com/cve/CVE-2020-13119.htmlhttps://patchthecve.com/cve/CVE-2020-13119.htmlWed, 17 Jun 2026 02:52:39 +0000HIGH 8.1: ismartgate PRO 1.5.9 is vulnerable to clickjacking.CVE-2020-12843: ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doorshttps://patchthecve.com/cve/CVE-2020-12843.htmlhttps://patchthecve.com/cve/CVE-2020-12843.htmlWed, 17 Jun 2026 02:52:24 +0000CRITICAL 9.8: ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.CVE-2020-12842: ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDhttps://patchthecve.com/cve/CVE-2020-12842.htmlhttps://patchthecve.com/cve/CVE-2020-12842.htmlWed, 17 Jun 2026 02:52:24 +0000CRITICAL 9.8: ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php.CVE-2020-12841: ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.phphttps://patchthecve.com/cve/CVE-2020-12841.htmlhttps://patchthecve.com/cve/CVE-2020-12841.htmlWed, 17 Jun 2026 02:52:24 +0000MEDIUM 6.5: ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.phpCVE-2020-12840: ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.phphttps://patchthecve.com/cve/CVE-2020-12840.htmlhttps://patchthecve.com/cve/CVE-2020-12840.htmlWed, 17 Jun 2026 02:52:24 +0000MEDIUM 6.5: ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.phpCVE-2020-12839: ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.https://patchthecve.com/cve/CVE-2020-12839.htmlhttps://patchthecve.com/cve/CVE-2020-12839.htmlWed, 17 Jun 2026 02:52:24 +0000CRITICAL 9.8: ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.CVE-2020-12838: ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.https://patchthecve.com/cve/CVE-2020-12838.htmlhttps://patchthecve.com/cve/CVE-2020-12838.htmlWed, 17 Jun 2026 02:52:24 +0000CRITICAL 9.8: ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.CVE-2020-12837: ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doorshttps://patchthecve.com/cve/CVE-2020-12837.htmlhttps://patchthecve.com/cve/CVE-2020-12837.htmlWed, 17 Jun 2026 02:52:24 +0000HIGH 7.5: ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used.CVE-2020-12282: iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, ahttps://patchthecve.com/cve/CVE-2020-12282.htmlhttps://patchthecve.com/cve/CVE-2020-12282.htmlWed, 17 Jun 2026 02:51:33 +0000HIGH 8.8: iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)CVE-2020-12281: iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.https://patchthecve.com/cve/CVE-2020-12281.htmlhttps://patchthecve.com/cve/CVE-2020-12281.htmlWed, 17 Jun 2026 02:51:33 +0000MEDIUM 6.5: iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.CVE-2020-12280: iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/https://patchthecve.com/cve/CVE-2020-12280.htmlhttps://patchthecve.com/cve/CVE-2020-12280.htmlWed, 17 Jun 2026 02:51:33 +0000MEDIUM 6.5: iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php.