CVE-2024-37625

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /index.php...

CVE-2024-37625

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /index.php...

CVE-2024-38470

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /own.php...

PT-2024-27682 · Unknown · Zhimengzhe Ibarn

Name of the Vulnerable Software and Affected Versions: zhimengzhe iBarn version 1.5 Description: A reflected cross-site scripting XSS issue was discovered, which can be exploited via the search parameter at the "/index.php" API endpoint. This allows for potentially malicious scripts to be execute...

PT-2024-28024 · Ibarn · Ibarn

Name of the Vulnerable Software and Affected Versions: iBarn version 1.5 Description: A reflected cross-site scripting XSS issue was found, which can be triggered via the search parameter at the "/own.php" endpoint. Recommendations: For version 1.5, consider restricting access to the /own.php...

CVE-2024-37625

CVE-2024-37625 affects zhimengzhe iBarn v1.5, with a reflected XSS vulnerability exploitable via the search parameter in /index.php. The issue is documented across multiple sources (NVD, CVE list, CNNVD, PT-Security) as a reflected XSS at that endpoint. Connected docs confirm the vulnerable input...

CVE-2024-38469

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /pay.php...

iBarn Security Vulnerabilities

iBarn is an application by zhimengzhe personal developer. It provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn v1.5, which originates from a reflected cross-site scripting XSS vulnerability contained in the $search parameter on /index.php...

CVE-2024-38470

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /own.php...

CVE-2024-37625

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the $search parameter at /index.php...

iBarn Security Vulnerabilities

iBarn is an application by zhimengzhe personal developer. It provides file network backup, synchronization and sharing services. A security vulnerability exists in iBarn v1.5, which originates from a reflected cross-site scripting XSS vulnerability contained in the $search parameter on /pay.php...

VulnCheck KEV: CVE-2024-2194

The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL search parameter in all versions up to, and including, 14.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-5407

A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure...

CVE-2024-5408

Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm. This vulnerability could allow a remote attacker to steal details of a victim's user session by submitting a specially crafted URL...

CVE-2024-5408

CVE-2024-5408: A cross-site scripting vulnerability affects RhinOS 3.0-1190, exploitable via the search parameter of /portal/search.htm. A remote attacker could potentially steal a victim’s session details by crafting a URL. The available documents confirm the affected component and endpoint, and...

PT-2024-36021 · Rhinos · Rhinos

Name of the Vulnerable Software and Affected Versions: RhinOS versions 3.0-1190 Description: A vulnerability could allow PHP code injection through the "search" parameter in /portal/search.htm, enabling a remote attacker to perform a reverse shell on the remote system and compromise the entire...

PT-2024-25123 · Roothub · Roothub

Name of the Vulnerable Software and Affected Versions: Roothub version 2.6 Description: A SQL injection issue was discovered in Roothub via the s parameter in the search function. This allows for potential exploitation. No information is provided about the estimated number of potentially affected...

Roothub 安全漏洞

Roothub is a forum system developed using SSM and MySQL. A security vulnerability exists in Roothub v2.6, which was discovered to contain an SQL injection vulnerability via the "s" parameter in the search function...

PT-2024-27165 · WordPress · Interactive World Maps

Name of the Vulnerable Software and Affected Versions: Interactive World Maps plugin for WordPress versions up to, and including, 2.4.14 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...

Online Furniture Shopping Ecommerce Website SQL注入漏洞

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A SQL injection vulnerability exists in the Online Furniture Shopping Ecommerce Website, which is caused by a SQL injection vulnerability in the txtSearch parameter of the search.php...