Skip to content
OpenAdvisories
High · 8.8 CVE-2020-20588 EUVD-2020-13374GHSA-9vp3-p6fp-p88f

File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code…

Published Dec 15, 2022 · Updated Apr 21, 2025 · Assigned by mitre

Description

File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.

References