Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 14/09/2018 Updated: 07/11/2018

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 8.6 | Impact Score: 4 | Exploitability Score: 3.9

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

Vulnerable Product	Search on Vulmon	Subscribe to Product
lg supersign cms 2.5

# Exploit Title: LG SuperSign EZ CMS 25 - Local File Inclusion # Date: 2018-09-13 # Exploit Author: Alejandro Fanjul # Vendor Homepage: wwwlgcom/ar/software-lg-supersign # Version: SuperSign EZ (CMS) # Tested on: Web OS 40 # CVE : CVE-2018-16288 # More info: mamaquieroserpentesterblogspotcom/2018/09/multiple-vulnerabilities-in ...

LG SuperSign EZ CMS version 25 suffers from a local file inclusion vulnerability ...

CWE-200 http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html https://www.exploit-db.com/exploits/45440/https://nvd.nist.gov https://www.exploit-db.com/exploits/45440/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-16288

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect