CVE-2020-37034 — HelloWeb 2.0 - Arbitrary File Download
HelloWeb 2.0 contains an arbitrary file download vulnerability that allows remote attackers to download system files by manipulating filepath and filename parameters. Attackers …
Published: 2026-01-30 · CVSS: 8.7 · CVSS 4.0
HelloWeb 2.0 contains an arbitrary file download vulnerability that allows remote attackers to download system files by manipulating filepath and filename parameters. Attackers can send crafted GET requests to download.asp with directory traversal to access sensitive configuration and system files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7