QiHang Media Web Digital Signage version 3.0.9 suffers from an arbitrary file disclosure vulnerability.