LG SuperSign CMS File Upload Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. A file upload vulnerability exists in LG SuperSign CMS, which can be exploited by an attacker...

LG SuperSign CMS Arbitrary File Read Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. An arbitrary file read vulnerability exists in LG SuperSign CMS, which can be exploited by an...

CVE-2018-16287

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs...

Unrestricted file upload

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs...

CVE-2018-16287: Unrestricted Upload of File with Dangerous Type

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs...

CVE-2018-16288: Exposure of Sensitive Information to an Unauthorized Actor

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs...

PT-2018-13465

Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue concerns a file upload vulnerability. It allows file upload via /signEzUI/playlist/edit/upload/..%2f URIs. Recommendations At the moment, there is no information about a...