QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure

Advisories

severity: high
date: December 10, 2025
Affecting: QiHang Media Web Digital Signage 3.0.9.0
CVE: CVE-2020-36899
CWE: CWE-530 Exposure of Backup File to an Unauthorized Control Sphere
CVSS: 8.7
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References: ExploitDB-48750
Official Product Homepage
Zero Science Lab Disclosure (ZSL-2020-5581)
Credit: LiquidWorm as Gjoko Krstic of Zero Science Lab
Description: QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote attackers to access sensitive files through unverified 'filename' and 'path' parameters. Attackers can exploit the QH.aspx endpoint to read arbitrary files and directory contents without authentication by manipulating download and getAll actions.