Lucene search
+L

716 matches found

CVE
CVE
added 2023/11/22 12:0 a.m.54 views

CVE-2023-47014

CVE-2023-47014 affects Sourcecodester Sticky Notes App Using PHP with Source Code v1.0. It is a CSRF vulnerability in add-note.php that can let a local attacker obtain sensitive information. NVD lists CVSS v3.1 base score 6.5 (MEDIUM) with network attack vector, low complexity, no privileges, use...

6.5CVSS6.3AI score0.00342EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.15 views

SourceCodester Sticky Notes Security Vulnerability

SourceCodester Sticky Notes is a sticky notes application. A security vulnerability exists in SourceCodester Sticky Notes v.1.0, which stems from the presence of a cross-site request forgery CSRF vulnerability that could allow a local attacker to obtain sensitive information via a crafted payload...

6.5CVSS6.2AI score0.00342EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2023/11/21 12:0 a.m.13 views

WordPress My Sticky Bar Plugin < 2.5.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:premio:mystickymenu"; if description...

4.8CVSS5.3AI score0.00626EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2023/11/21 12:0 a.m.17 views

WordPress My Sticky Bar Plugin < 2.6.5 Improper Authorization Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:premio:mystickymenu"; if description...

5.4CVSS7AI score0.0052EPSS
SaveExploits2References1
GithubExploit
GithubExploit
added 2023/11/14 8:8 a.m.22 views

Exploit for Cross-Site Request Forgery (CSRF) in Remyandrade Sticky_Notes_App

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1...

6.5CVSS7AI score0.00342EPSS
SaveExploits2
NVD
NVD
added 2023/11/12 11:15 p.m.19 views

CVE-2023-27418

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Side Menu Lite – add sticky fixed buttons plugin = 4.0 versions...

8.8CVSS0.00333EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/12 11:15 p.m.5 views

CVE-2023-27418

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Side Menu Lite – add sticky fixed buttons plugin = 4.0 versions...

8.8CVSS5.8AI score0.00333EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/12 11:15 p.m.16 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Side Menu Lite – add sticky fixed buttons plugin = 4.0 versions...

6.8CVSS7.5AI score0.00333EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/12 10:53 p.m.35 views

CVE-2023-27418

CSRF vulnerability CVE-2023-27418 affects the WordPress plugin Side Menu Lite (

8.8CVSS6.5AI score0.00333EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/08 12:0 a.m.6 views

PT-2023-30187 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability in the remote PIN module that causes incorrect information storage locations, potentially affecting confidentiality...

7.5CVSS7AI score0.00443EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/10/28 12:0 a.m.10 views

The vulnerability in the admin.php script of the WordPress content management system’s “My Sticky Elements” plugin allows attackers to perform cross-site scripting attacks.

The vulnerability of the admin.php script on the WordPress administration panel of the My Sticky Elements plugin is related to the lack of protective measures for the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.4CVSS5.7AI score0.01572EPSS
SaveExploits2References5Affected Software1
OSV
OSV
added 2023/10/26 5:15 p.m.6 views

CVE-2023-5792

A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability affects unknown code of the file endpoint/delete-note.php. The manipulation of the argument note leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00649EPSS
SaveExploits1References3
NVD
NVD
added 2023/10/26 5:15 p.m.34 views

CVE-2023-5791

A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS4.5AI score0.00505EPSS
SaveExploits1References3
OSV
OSV
added 2023/10/26 5:15 p.m.9 views

CVE-2023-5791

A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS4AI score0.00505EPSS
SaveExploits1References3
NVD
NVD
added 2023/10/26 5:15 p.m.30 views

CVE-2023-5792

A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability affects unknown code of the file endpoint/delete-note.php. The manipulation of the argument note leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.5AI score0.00649EPSS
SaveExploits1References3
Prion
Prion
added 2023/10/26 5:15 p.m.26 views

Sql injection

A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability affects unknown code of the file endpoint/delete-note.php. The manipulation of the argument note leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS9.7AI score0.00649EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/10/26 5:15 p.m.23 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack...

4CVSS6AI score0.00505EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/10/26 4:31 p.m.43 views

CVE-2023-5792 SourceCodester Sticky Notes App delete-note.php sql injection

A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability affects unknown code of the file endpoint/delete-note.php. The manipulation of the argument note leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS10AI score0.00649EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/10/26 4:31 p.m.14 views

CVE-2023-5792 SourceCodester Sticky Notes App delete-note.php sql injection

A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability affects unknown code of the file endpoint/delete-note.php. The manipulation of the argument note leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS7.8AI score0.00649EPSS
SaveExploits1References3
CVE
CVE
added 2023/10/26 4:31 p.m.65 views

CVE-2023-5792

CVE-2023-5792 affects SourceCodester Sticky Notes App 1.0, exploiting a SQL injection in the file endpoint/delete-note.php via the vulnerable parameter note. Multiple sources confirm remote exploitation and public disclosure of the exploit, with the vulnerability’s impact described as compromisin...

9.8CVSS7.5AI score0.00649EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder