CVE-2024-6177

CVE-2024-6177 affects LG Electronics SuperSign CMS. A Reflected XSS vulnerability arises from improper input neutralization during web page generation, impacting versions 4.1.3 up to, but not including, 4.3.1. Exploitation leads to client-side script execution with low impact to confidentiality a...

CVE-2024-6176

CVE-2024-6176 concerns LG Electronics LG SuperSign CMS, affecting versions from 4.1.3 up to but not including 4.3.1. The issue stems from allocation of resources without limits or throttling, enabling port scanning against vulnerable deployments. Connected sources confirm the affected product and...

CVE-2024-6176 Port scanning vulnerability in LG SuperSign CMS

Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanning.This issue affects LG SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6176 Port scanning vulnerability in LG SuperSign CMS

Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanning.This issue affects LG SuperSign CMS: from 4.1.3 before 4.3.1...

PT-2024-37438

Name of the Vulnerable Software and Affected Versions: LG Electronics SuperSign CMS versions 4.1.3 through 4.3.0 Description: The issue affects the LG Electronics SuperSign CMS, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For...

CVE-2024-6178: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

PT-2024-37435

Name of the Vulnerable Software and Affected Versions: LG SuperSign CMS versions 4.1.3 through 4.3.0 Description: The issue affects the allocation of resources, allowing for port scanning. Recommendations: For LG SuperSign CMS versions 4.1.3 through 4.3.0, update to version 4.3.1 or later to...

PT-2024-37436

Name of the Vulnerable Software and Affected Versions: LG Electronics SuperSign CMS versions 4.1.3 through 4.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a Reflected XSS vulnerability...

CVE-2024-6179: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

PT-2024-37437

Name of the Vulnerable Software and Affected Versions: LG Electronics SuperSign CMS versions 4.1.3 through 4.3.0 Description: The issue affects LG Electronics SuperSign CMS, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For version...

CVE-2024-6177: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before 4.3.1...

CVE-2024-6176: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanning.This issue affects LG SuperSign CMS: from 4.1.3 before 4.3.1...

LG SuperSign CMS Remote Code Execution Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. A remote code execution vulnerability exists in LG SuperSign CMS, which can be exploited by...

CVE-2018-17173

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail...

CVE-2018-17173

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail...

CVE-2018-17173

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail...

CVE-2018-17173

CVE-2018-17173 affects LG SuperSign EZ CMS (2.5 era) and allows unauthenticated remote code execution via the sourceUri parameter to qsr_server/device/getThumbnail. Exploitation can lead to arbitrary command execution and complete server compromise. Remediation: upgrade to a patched LG SuperSign ...

PT-2018-13933

Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary code via the sourceUri parameter to "qsr server/device/getThumbnail" API endpoint. Recommendations At the moment, there is no...

CVE-2018-17173: Improper Control of Generation of Code

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail...

LG SuperSign CMS Arbitrary File Read Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. An arbitrary file read vulnerability exists in LG SuperSign CMS, which can be exploited by an...