CNNVD-202512-1808 Information

CNNVD ID

CNNVD-202512-1808

CVE-2020-36899

  • CNNVD Published: 2025-12-10

Description (Chinese)

QiHang Media Web Digital Signage是中国QiHang公司的一个数字标牌管理软件。 QiHang Media Web Digital Signage 3.0.9版本存在安全漏洞,该漏洞源于filename和path参数存在文件泄露,可能导致信息泄露。

Description (English)

QiHang Media Web Digital Signage is a digital brand management software for QiHang in China. QiHang Media Web Digital Signage version 3.0.9 contains a security loophole, which stems from the existence of file leaks in filename and path parameters, which may lead to the disclosure of information.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

QiHang

Published

2025-12-10

Last Modified

2026-02-24

References

http://www.howfor.com https://www.exploit-db.com/exploits/48750 https://www.vulncheck.com/advisories/qihang-media-web-digital-signage-unauthenticated-arbitrary-file-disclosure https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5581.php

Share on: