Lucene search
+L

5 matches found

Kitploit
Kitploit
•added 2026/10/31 8:27 p.m.•23 views

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS Exploit Author: emirhanerdogu Vendor Homepage https://www.sourcecodester.com/php/16928/sticky-notes-app-using-php-source-code.html Software Link...

6.5CVSS6.8AI score0.00342EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/22 12:00 a.m.•12 views

CVE-2023-47014: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in Sourcecodester Sticky Notes App Using PHP with Source Code v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to add-note.php...

6.5CVSS6.5AI score0.00342EPSS
SaveExploits2References2
Prion
Prion
•added 2023/10/26 5:15 p.m.•38 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack...

4CVSS6AI score0.00562EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/10/26 4:31 p.m.•123 views

CVE-2023-5791

The CVE-2023-5791 entry concerns SourceCodester Sticky Notes App 1.0. An XSS vulnerability exists in the file endpoint/add-note.php, triggered by manipulating the noteTitle/noteContent parameters. A remote attack is possible, and the exploit has been disclosed publicly. Multiple connected records...

6.1CVSS3.7AI score0.00562EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/26 12:00 a.m.•11 views

CVE-2023-5791: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS3.7AI score0.00562EPSS
SaveExploits1References3
Rows per page
Query Builder