CVE-2020-36914

🗓️ 06 Jan 2026 15:53:22Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 5 Views🌐 WEB

QiHang Media Web Digital Signage 3.0.9 exposes authentication cookies in cleartext, enabling remote attackers to intercept credentials.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2020-36914	6 Jan 202616:10	–	circl
CNNVD	QiHang Media Web Digital Signage 安全漏洞	6 Jan 202600:00	–	cnnvd
Cvelist	CVE-2020-36914 QiHang Media Web Digital Signage 3.0.9 Cookie Authentication Credentials Disclosure	6 Jan 202615:53	–	cvelist
EUVD	EUVD-2026-1023	6 Jan 202615:53	–	euvd
NVD	CVE-2020-36914	6 Jan 202616:15	–	nvd
Positive Technologies	PT-2026-1448	6 Jan 202600:00	–	ptsecurity
Vulnrichment	CVE-2020-36914 QiHang Media Web Digital Signage 3.0.9 Cookie Authentication Credentials Disclosure	6 Jan 202615:53	–	vulnrichment
Zero Science Lab	QiHang Media Web (QH.aspx) Digital Signage 3.0.9 Cookie User Password Disclosure	13 Aug 202000:00	–	zeroscience

Vulners

Node

shenzhen_xingmeng_qihang_media qihang_media_web_digital_signageMatch3.0.9.0

[
  {
    "vendor": "Shenzhen Xingmeng Qihang Media Co., Ltd.",
    "product": "QiHang Media Web (QH.aspx) Digital Signage",
    "versions": [
      {
        "version": "3.0.9.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/158858
vulncheck	www.vulncheck.com/advisories/qihang-media-web-digital-signage-cookie-authentication-credentials-disclosure
cxsecurity	www.cxsecurity.com/issue/WLB-2020080059
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/186770
howfor	www.howfor.com/
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5578.php

Parameter	Position	Path	Description	CWE
qihang_cookie_key_password	header	QH.aspx	Cleartext cookie transmission of authentication credentials (cookie-based auth) enabling MITM capture.	CWE-319

15 Apr 2026 00:35Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5

CVSS 48.6

EPSS0.00051

SSVC

CWE-319