high8.8
CVE-2020-20588
File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload t…
Impact
File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibarn Project | Ibarn | Version 1.5 |