Lucene search

Supersign Cms Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2018-16286

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.

9.8CVSS

9.5AI Score

0.007EPSS

2018-09-14 09:29 PM

cve

CVE-2018-16287

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

9.8CVSS

9.4AI Score

0.006EPSS

2018-09-14 09:29 PM

cve

CVE-2018-17173

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

9.8CVSS

9.7AI Score

0.871EPSS

2018-09-21 05:29 PM