Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Emirhanerdogu

#33119of 53,633
7.8Total CVSS
Vulnerabilities · 1
PT-2023-7576
7.8
2023-11-22
Unknown · Sticky Notes App Using Php With Source Code · CVE-2023-47014
**Name of the Vulnerable Software and Affected Versions** Sticky Notes App Using PHP with Source Code version 1.0 **Description** The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This vulnerability can be exploited by a remote attacker to gain access to confidential information. The exploitation involves sending a crafted payload to the `add-note.php` endpoint, allowing the attacker to obtain sensitive information. **Recommendations** For Sticky Notes App Using PHP with Source Code version 1.0, consider disabling access to the `add-note.php` endpoint until a patch is available to prevent exploitation of the CSRF vulnerability. Restricting access to this endpoint can help minimize the risk of sensitive information being obtained by an attacker.