CVE-2020-37034 | HelloWeb 2.0 download.asp filepath/filename path traversal (Exploit 48659 / EDB-48659)

January 31, 2026 Yanac

A vulnerability, which was classified as critical, has been found in HelloWeb 2.0. This impacts an unknown function of the file download.asp. This manipulation of the argument filepath/filename causes path traversal.

This vulnerability is handled as CVE-2020-37034. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More