45 matches found
iBarn Security Vulnerabilities
iBarn is an application by zhimengzhe personal developer. It provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn v1.5, which originates from a reflected cross-site scripting XSS vulnerability contained in the $search parameter on /index.php...
CVE-2024-38470: Improper Neutralization of Input During Web Page Generation
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /own.php...
CVE-2024-38469
The zhimengzhe iBarn v1.5 application is vulnerable to a reflected cross-site scripting (XSS) flaw. The root cause is the improper neutralization of script-related HTML tags via the $search parameter at the /pay.php API endpoint. This vulnerability could allow an attacker to execute malicious scr...
PT-2024-28024 · Ibarn · Ibarn
Name of the Vulnerable Software and Affected Versions: iBarn version 1.5 Description: A reflected cross-site scripting XSS issue was found, which can be triggered via the search parameter at the "/own.php" endpoint. Recommendations: For version 1.5, consider restricting access to the /own.php...
CVE-2024-38469: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /pay.php...
CVE-2024-37625: Improper Neutralization of Input During Web Page Generation
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /index.php...
iBarn Security Vulnerabilities
iBarn is an application by zhimengzhe personal developer. It provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn v1.5, which originates from a reflected cross-site scripting XSS vulnerability contained in the $search parameter on /own.php...
CVE-2024-38470
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /own.php...
CVE-2024-37625
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /index.php...
CVE-2024-38470
The zhimengzhe iBarn v1.5 application, which provides file network backup, synchronization, and sharing services, is vulnerable to a reflected cross-site scripting (XSS) flaw. The vulnerability is triggered via the $search parameter at the /own.php endpoint due to improper neutralization of input...
CVE-2024-37625
CVE-2024-37625 affects zhimengzhe iBarn v1.5, with a reflected XSS vulnerability exploitable via the search parameter in /index.php. The issue is documented across multiple sources (NVD, CVE list, CNNVD, PT-Security) as a reflected XSS at that endpoint. Connected docs confirm the vulnerable input...
iBarn Security Vulnerabilities
iBarn is an application by zhimengzhe personal developer. It provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn v1.5, which originates from a reflected cross-site scripting XSS vulnerability contained in the $search parameter on /pay.php...
CVE-2024-26471
A reflected cross-site scripting XSS vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php...
CVE-2024-26471
A reflected cross-site scripting XSS vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php...
iBarn Security Vulnerabilities
iBarn is an application by zhimengzhe personal developer. Provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn v1.5, which stems from a reflected cross-site scripting XSS vulnerability in the search parameter of the offer.php file...
CVE-2024-26471
The zhimengzhe iBarn v1.5 application is susceptible to a reflected cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of input in the search parameter of the offer.php file, which allows an attacker to inject malicious JavaScript into a victim's web browser. ...
CVE-2024-26471: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php...
CVE-2024-26471
A reflected cross-site scripting XSS vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php...
CVE-2024-26471
A reflected cross-site scripting XSS vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php...