Vulnerabilities

TI-2024-25711 CVE-2024-38470 · GHSA-82rc-cc5p-ff4m

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS)…

MEDIUM 60

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00341 Published 2024-06-17 No fix listed CWE-79

TI-2024-25710 CVE-2024-38469 · GHSA-p9qg-6v6v-2g47

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS)…

MEDIUM 61

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00347 Published 2024-06-17 No fix listed CWE-80

TI-2020-13879 CVE-2020-20588 · GHSA-9vp3-p6fp-p88f

File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn…

HIGH 73

File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01277 Published 2022-12-15 No fix listed CWE-434

Vulnerabilities

Filters

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS)…

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS)…

File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn…