Qihang Media Web Digital Signage
Approved changes feed: RSS · Atom
cpe:2.3:a:shenzhen_xingmeng_qihang_media_co.,_ltd._guangzhou_hefeng_automation_technology_co.,_ltd.:qihang_media_web_digital_signage:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. (8e800fbc-b005-57cf-9e00-7a3efac46ea9) |
|---|---|
| Product | Qihang Media Web Digital Signage (4eab70d5-aa2c-5018-b8dd-311ef3ba7f57) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36899 |
vulnerable | 2026-06-08 05:25:49.795190 |
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure
QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote attackers to access sensitive files through unverified 'filename' and 'path' parameters. Attackers can exploit the QH.aspx endpoint to read arbitrary files and directory contents without authentication by manipulating download and getAll actions.
Published: 2025-12-10T21:03:57.079Z
Updated: 2025-12-11T18:52:47.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36897 |
vulnerable | 2026-06-08 05:25:49.794143 |
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution
QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx file that allows attackers to upload malicious ASPX scripts. Attackers can exploit the file upload functionality by using the 'remotePath' and 'fileToUpload' parameters to write and execute arbitrary system commands on the server.
Published: 2025-12-10T21:02:56.142Z
Updated: 2025-12-11T18:52:59.886Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.