Skip to content
OpenAdvisories

Vendor

HELLOWEB

1 known vulnerabilities.

Products

HelloWeb 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-37034

    HelloWeb 2.0 - Arbitrary File Download

    HelloWeb 2.0 contains an arbitrary file download vulnerability that allows remote attackers to download system files by manipulating filepath and filename parameters. Attackers can send crafted GET requests to download.asp with directory traversal to access s…

    HELLOWEB HelloWeb