Global
QiHang Media Web Digital Signage has four flaws, including cleartext admin credentials
NVD published 4 vulnerabilities in QiHang Media Web Digital Signage, covering authentication bypass, remote code execution, path traversal and a security flaw. In version 3.0.9, a cleartext credentials flaw lets unauthenticated attackers read administrative login information from an unprotected XML file.
- Type
- Vulnerability
- Sector
- Vendor
- Country
- Global
Sources
- CVE-2020-36896 · NIST NVD
- CVE-2020-36897 · NIST NVD
- CVE-2020-36898 · NIST NVD
- CVE-2020-36899 · NIST NVD
- http://www.howfor.com
- https://www.exploit-db.com/exploits/48748