PT-2024-28023 · Ibarn · Ibarn

Name of the Vulnerable Software and Affected Versions: iBarn version 1.5 Description: A reflected cross-site scripting XSS issue was found, which can be triggered via the search parameter at the "/pay.php" API endpoint. Recommendations: For version 1.5, as a temporary workaround, consider...

CVE-2024-37625

CVE-2024-37625 affects zhimengzhe iBarn v1.5, with a reflected XSS vulnerability exploitable via the search parameter in /index.php. The issue is documented across multiple sources (NVD, CVE list, CNNVD, PT-Security) as a reflected XSS at that endpoint. Connected docs confirm the vulnerable input...

PT-2024-28024 · Ibarn · Ibarn

Name of the Vulnerable Software and Affected Versions: iBarn version 1.5 Description: A reflected cross-site scripting XSS issue was found, which can be triggered via the search parameter at the "/own.php" endpoint. Recommendations: For version 1.5, consider restricting access to the /own.php...

CVE-2024-38470

CVE-2024-38470 affects iBarn v1.5, with a reflected XSS in the /own.php endpoint exposed via the search parameter. The vulnerability arises from unsanitized input reflected in the response, enabling HTML/JS injection (impact described as Low Confidentiality and Integrity, with no Availability imp...

CVE-2024-38470

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /own.php...

iBarn Security Vulnerabilities

iBarn is an application by zhimengzhe personal developer. It provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn v1.5, which originates from a reflected cross-site scripting XSS vulnerability contained in the $search parameter on /own.php...

CVE-2024-26471

A reflected cross-site scripting XSS vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php...

CVE-2024-26471

A reflected cross-site scripting XSS vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php...

iBarn Security Vulnerabilities

iBarn is an application by zhimengzhe personal developer. Provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn v1.5, which stems from a reflected cross-site scripting XSS vulnerability in the search parameter of the offer.php file...

CVE-2024-26471

A reflected cross-site scripting XSS vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php...

CVE-2024-26471

CVE-2024-26471 describes a reflected cross-site scripting (XSS) vulnerability in the zhimengzhe iBarn v1.5, exploitable via the search parameter in offer.php. The documented risk is that an attacker could inject malicious JavaScript into a victim’s browser, enabling script execution in the contex...

CVE-2020-20588

File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php...

iBarn 代码问题漏洞

iBarn is an application by zhimengzhe personal developer. It provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn version 1.5, which originates from a file upload vulnerability in the action/Core.class.php function. An attacker can exploit t...

CVE-2020-20588

File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php...

CVE-2020-20588

CVE-2020-20588 affects zhimengzhe iBarn 1.5 via a file upload vulnerability in the upload function of action/Core.class.php, allowing remote code execution through avatar uploads to index.php. The NVD/NIST entry scores it CVSS 3.1 Base Score 8.8 (High) with network access, low attack complexity, ...