LG Simple Editor Remote Code Execution

This Metasploit module exploits broken access control and directory traversal vulnerabilities in LG Simple Editor software for gaining code execution. The vulnerabilities exist in versions of LG Simple Editor prior to v3.21. By exploiting this flaw, an attacker can upload and execute a malicious JSP payload with the SYSTEM user permissions.

access access control attacker broken access control code code execution control directory directory traversal editor exploiting exploits flaw jsp malicious metasploit payload permissions remote code remote code execution simple software system upload vulnerabilities