← Back

Ibarn

ibarn

Vendor: Ibarn Project • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-38470
1Ibarn Project
1Ibarn
Apr 30, 2025
Jun 17, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php.
CVE-2024-38469
1Ibarn Project
1Ibarn
Apr 30, 2025
Jun 17, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php.
CVE-2020-20588
1Ibarn Project
1Ibarn
Apr 21, 2025
Dec 15, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.