Unrated severityNVD Advisory· Published Dec 10, 2025· Updated Dec 11, 2025

Eibiz i-Media Server Digital Signage 3.8.0 Directory Traversal Vulnerability

CVE-2020-36893

Description

Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remote attackers to access files outside the server's root directory. Attackers can exploit the 'oldfile' GET parameter to view sensitive configuration files like web.xml and system files such as win.ini.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Plexcor/Media Serverllm-fuzzy
Range: = 3.8.0
EIBIZ Co.,Ltd./i-Media Server Digital Signagev5
Range: 0

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/48766mitreexploit
www.vulncheck.com/advisories/eibiz-i-media-server-digital-signage-directory-traversal-vulnerabilitymitrethird-party-advisory
www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5585.phpmitrevendor-advisoryvdb-entry
www.eibiz.co.thmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000