Lucene search
Ibarn ProjectIbarn
3 matches found
CVE-2020-20588
File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.
8.8CVSS8.8AI score0.00312EPSS
Web
CVE-2024-38469
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php.
6.3CVSS6.2AI score0.00252EPSS
CVE-2024-38470
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php.
6.1CVSS6.2AI score0.00474EPSS