Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown
CVE-2024-6179
Disclosure Date: June 20, 2024 (last updated June 21, 2024)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.
0
Attacker Value
Unknown
CVE-2024-6178
Disclosure Date: June 20, 2024 (last updated June 21, 2024)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.
0
Attacker Value
Unknown
CVE-2024-6177
Disclosure Date: June 20, 2024 (last updated June 21, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.
0
Attacker Value
Unknown
CVE-2024-6176
Disclosure Date: June 20, 2024 (last updated June 20, 2024)
Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanning.This issue affects LG SuperSign CMS: from 4.1.3 before < 4.3.1.
0
Attacker Value
Unknown
CVE-2018-17173
Disclosure Date: September 21, 2018 (last updated November 27, 2024)
LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.
0
Attacker Value
Unknown
CVE-2018-16287
Disclosure Date: September 14, 2018 (last updated November 27, 2024)
LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.
0
Attacker Value
Unknown
CVE-2018-16286
Disclosure Date: September 14, 2018 (last updated November 27, 2024)
LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.
0
Attacker Value
Unknown
CVE-2018-16706
Disclosure Date: September 14, 2018 (last updated November 27, 2024)
LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080.
0
Attacker Value
Unknown
CVE-2018-16288
Disclosure Date: September 14, 2018 (last updated November 27, 2024)
LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.
0
