CVE-2020-20588

CVE-2020-20588 affects zhimengzhe iBarn 1.5 via a file upload vulnerability in the upload function of action/Core.class.php, allowing remote code execution through avatar uploads to index.php. The NVD/NIST entry scores it CVSS 3.1 Base Score 8.8 (High) with network access, low attack complexity, ...

CVE-2024-38469

The zhimengzhe iBarn v1.5 application is vulnerable to a reflected cross-site scripting (XSS) flaw. The root cause is the improper neutralization of script-related HTML tags via the $search parameter at the /pay.php API endpoint. This vulnerability could allow an attacker to execute malicious scr...

CVE-2024-38470

The zhimengzhe iBarn v1.5 application, which provides file network backup, synchronization, and sharing services, is vulnerable to a reflected cross-site scripting (XSS) flaw. The vulnerability is triggered via the $search parameter at the /own.php endpoint due to improper neutralization of input...