Lucene search
+L

5 matches found

Kitploit
Kitploit
•added 2026/10/15 12:07 p.m.•15 views

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS Exploit Author: emirhanerdogu Vendor Homepage https://www.sourcecodester.com/php/16928/sticky-notes-app-using-php-source-code.html Software Link...

6.5CVSS6.9AI score0.00342EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/22 12:00 a.m.•7 views

CVE-2023-47014: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in Sourcecodester Sticky Notes App Using PHP with Source Code v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to add-note.php...

6.5CVSS6.7AI score0.00342EPSS
SaveExploits2References2
Prion
Prion
•added 2023/10/26 5:15 p.m.•35 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack...

4CVSS6AI score0.00505EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/10/26 4:31 p.m.•118 views

CVE-2023-5791

The CVE-2023-5791 entry concerns SourceCodester Sticky Notes App 1.0. An XSS vulnerability exists in the file endpoint/add-note.php, triggered by manipulating the noteTitle/noteContent parameters. A remote attack is possible, and the exploit has been disclosed publicly. Multiple connected records...

6.1CVSS3.9AI score0.00505EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/26 12:00 a.m.•8 views

CVE-2023-5791: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS3.9AI score0.00505EPSS
SaveExploits1References3
Rows per page
Query Builder