Filtered by vendor Ibarn Project Subscriptions
Filtered by product Ibarn Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-38469 1 Ibarn Project 1 Ibarn 2025-04-30 6.3 Medium
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php.
CVE-2024-38470 1 Ibarn Project 1 Ibarn 2025-04-30 6.1 Medium
zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php.
CVE-2020-20588 1 Ibarn Project 1 Ibarn 2025-04-21 8.8 High
File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.