LG SuperSign CMS File Upload Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. A file upload vulnerability exists in LG SuperSign CMS, which can be exploited by an attacker...

CVE-2018-16288: Exposure of Sensitive Information to an Unauthorized Actor

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs...

PT-2018-13465

Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue concerns a file upload vulnerability. It allows file upload via /signEzUI/playlist/edit/upload/..%2f URIs. Recommendations At the moment, there is no information about a...

CVE-2018-16287: Unrestricted Upload of File with Dangerous Type

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs...