Qihang Media Web Digital Signage
Approved changes feed: RSS · Atom
cpe:2.3:a:shenzhen_xingmeng_qihang_media_co.,_ltd.guangzhou_hefeng_automation_technology_co.,_ltd.:qihang_media_web_digital_signage:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Shenzhen Xingmeng Qihang Media Co., Ltd.Guangzhou Hefeng Automation Technology Co., Ltd. (4ba1fe97-4274-5f4c-b3bf-3bbb1ee8646b) |
|---|---|
| Product | Qihang Media Web Digital Signage (c12cb5f1-4c3d-55bc-9db5-19a0605f00e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36898 |
vulnerable | 2026-06-08 05:25:49.794700 |
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Deletion
QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file deletion vulnerability in the QH.aspx endpoint that allows remote attackers to delete files without authentication. Attackers can exploit the 'data' parameter by sending a POST request with file paths to delete arbitrary files with web server permissions using directory traversal sequences.
Published: 2025-12-10T21:03:26.361Z
Updated: 2025-12-11T18:52:53.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36896 |
vulnerable | 2026-06-08 05:25:49.792632 |
QiHang Media Web Digital Signage 3.0.9 Cleartext Credentials Disclosure
QiHang Media Web Digital Signage 3.0.9 contains a cleartext credentials vulnerability that allows unauthenticated attackers to access administrative login information through an unprotected XML file. Attackers can retrieve hardcoded admin credentials by requesting the '/xml/User/User.xml' file, enabling direct authentication bypass.
Published: 2025-12-10T20:55:02.794Z
Updated: 2025-12-11T18:53:06.885Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.