CVE-2018-16288

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• LG SuperSign EZ CMS 2.5 - Local File Inclusion2018-09-19 · webapps · hardware

Impact

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html
• https://www.exploit-db.com/exploits/45440/
• http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html
• https://www.exploit-db.com/exploits/45440/