CVE-2020-36899

Description

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote attackers to access sensitive files through unverified 'filename' and 'path' parameters. Attackers can exploit the QH.aspx endpoint to read arbitrary files and directory contents without authentication by manipulating download and getAll actions.

PUBLISHED Reserved 2025-12-09 | Published 2025-12-10 | Updated 2025-12-11 | Assigner VulnCheck

Problem types

CWE-530: Exposure of Backup File to an Unauthorized Control Sphere

Product status

Credits

LiquidWorm as Gjoko Krstic of Zero Science Lab finder

References

www.exploit-db.com/exploits/48750 exploit

www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5581.php exploit

www.exploit-db.com/exploits/48750 (ExploitDB-48750) exploit

www.howfor.com (Official Product Homepage) product

www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5581.php (Vendor Security Advisory for ZSL-2020-5581) vendor-advisory vdb-entry

www.vulncheck.com/...authenticated-arbitrary-file-disclosure (VulnCheck Advisory: QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure) third-party-advisory

cve.org (CVE-2020-36899)

nvd.nist.gov (CVE-2020-36899)

Download JSON