3 matches found
CVE-2018-16288: Exposure of Sensitive Information to an Unauthorized Actor
LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs...
8.6CVSS7.9AI score0.35828EPSS
SaveExploits5References2
CVE-2018-16287: Unrestricted Upload of File with Dangerous Type
LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs...
9.8CVSS8.3AI score0.19587EPSS
SaveExploits1References2
PT-2018-13465
Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue concerns a file upload vulnerability. It allows file upload via /signEzUI/playlist/edit/upload/..%2f URIs. Recommendations At the moment, there is no information about a...
9.8CVSS0.19587EPSS
SaveExploits1References2
20