Researchers
Back
Ale Fanjul
#15259
of 60,594
20.3
Total CVSS
Vulnerabilities
·
3
Medium
1
High
2
PT-2018-13464
2018-09-14
5.0
CVE-2018-16286
Lg
Lg Supersign Cms
The issue allows authentication bypass. This is possible because the CAPTCHA requirement can be skipped by sending a `captcha:pass` cookie. Additionally, the PIN is limited to four digits, which may facilitate unauthorized access.
PT-2018-13465
2018-09-14
7.5
CVE-2018-16287
Lg
Lg Supersign Cms
The issue concerns a file upload vulnerability. It allows file upload via `/signEzUI/playlist/edit/upload/..%2f` URIs.
PT-2018-13695
2018-09-14
7.8
CVE-2018-16706
Lg
Lg Supersign Cms
The issue allows LG TVs to be rebooted remotely without authentication. This can be achieved by sending a direct HTTP request to the /qsr server/device/reboot API endpoint on port 9080.