CVE-2020-36897

Dec 24, 2025
Updated Dec 24, 2025 CVE Database CVE-2020-36897 vulnerability security

CVE-2020-36897

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx file that allows attackers to upload malicious ASPX scripts. Attackers can exploit the file upload functionality by using the 'remotePath' and 'fileToUpload' parameters to write and execute arbitrary system commands on the server.

Scan your website for free

No signup needed. Get results in under 60 seconds.

Run Free Scan →

Scan for these vulnerabilities

Secably automatically detects the issues discussed in this article.

Start Free Scan