Approved changes feed: RSS · Atom

cpe:2.3:a:remyandrade:sticky_notes_app:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorRemyandrade (778e90e9-129a-5d15-ad71-c8bb9070dcc5)
ProductSticky Notes App (5db4ef20-aadf-5c3a-823b-a85c86b6ddaa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5792 vulnerable 2026-06-03 14:53:49.628455 SourceCodester Sticky Notes App delete-note.php sql injection
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability affects unknown code of the file endpoint/delete-note.php. The manipulation of the argument note leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-243598 is the identifier assigned to this vulnerability.
Published: 2023-10-26T16:31:05.967Z
Updated: 2024-08-02T08:07:32.705Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5791 vulnerable 2026-06-03 14:53:49.627898 SourceCodester Sticky Notes App add-note.php cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243597 was assigned to this vulnerability.
Published: 2023-10-26T16:31:04.854Z
Updated: 2024-08-02T08:07:32.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47014 vulnerable 2026-06-03 14:53:16.767347 Details available
A Cross-Site Request Forgery (CSRF) vulnerability in Sourcecodester Sticky Notes App Using PHP with Source Code v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to add-note.php.
Published: 2023-11-22T00:00:00.000Z
Updated: 2024-08-02T21:01:22.221Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.