Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2024-37625

Disclosure Date: June 17, 2024 (last updated July 19, 2024)
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /index.php.
Attacker Value
Unknown

CVE-2020-20588

Disclosure Date: December 15, 2022 (last updated February 24, 2025)
File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.