Howfor

Qihang Media Web Digital Signage

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2020-36897

Exploit
  • EPSS 1.86%
  • Veröffentlicht 10.12.2025 21:16:02
  • Zuletzt bearbeitet 17.12.2025 19:17:14

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx file that allows attackers to upload malicious ASPX scripts. Attackers can exploit the file upload functionality by using the 'remot...

9.1

CVE-2020-36898

Exploit
  • EPSS 17.83%
  • Veröffentlicht 10.12.2025 21:16:02
  • Zuletzt bearbeitet 17.12.2025 19:16:28

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file deletion vulnerability in the QH.aspx endpoint that allows remote attackers to delete files without authentication. Attackers can exploit the 'data' parameter by sending a POST r...

7.5

CVE-2020-36899

Exploit
  • EPSS 0.68%
  • Veröffentlicht 10.12.2025 21:16:02
  • Zuletzt bearbeitet 17.12.2025 19:01:53

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote attackers to access sensitive files through unverified 'filename' and 'path' parameters. Attackers can exploit the QH.aspx endpoint to...

7.5

CVE-2020-36896

Exploit
  • EPSS 1.42%
  • Veröffentlicht 10.12.2025 20:55:02
  • Zuletzt bearbeitet 17.12.2025 19:21:26

QiHang Media Web Digital Signage 3.0.9 contains a cleartext credentials vulnerability that allows unauthenticated attackers to access administrative login information through an unprotected XML file. Attackers can retrieve hardcoded admin credentials...