QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution

Advisories

severity: critical
date: December 10, 2025
Affecting: QiHang Media Web Digital Signage 3.0.9
CVE: CVE-2020-36897
CWE: CWE-434 Unrestricted Upload of File with Dangerous Type
CVSS: 9.3
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References: ExploitDB-48751
Official Product Homepage
Zero Science Lab Disclosure (ZSL-2020-5582)
Credit: LiquidWorm as Gjoko Krstic of Zero Science Lab
Description: QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx file that allows attackers to upload malicious ASPX scripts. Attackers can exploit the file upload functionality by using the 'remotePath' and 'fileToUpload' parameters to write and execute arbitrary system commands on the server.