CVE-2018-16286 | BDVDB-2026-106965 Detail

Description#

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html

Exploit#

No public exploit known

History#

Version 12018-09-14Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.