CVE-2012-3998

HIGH 7.5CVE-2012-3998 · Published 12/07/2012 · updated 16/06/2026

In short

CVE-2012-3998 is a HIGH (CVSS 7.5) vulnerability affecting sticky notes (sayakbanerjee).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 81.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sticky notes sayakbanerjee	`= 0.2.27052012.4≤ 0.2.27052012.5`	No fix yet

Description

Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the (1) paste id in admin/modules/mod_pastes.php or (2) show.php, (3) user id to admin/modules/mod_users.php, (4) project to list.php, or (5) session id to show.php.

References

gitorious.org/sticky-notes/sticky-notes/commit/d97475f07520d61af3d20fbaeb2e9a974c190308 · Exploit
lists.fedoraproject.org/pipermail/package-announce/2012-June/083120.html
lists.fedoraproject.org/pipermail/package-announce/2012-June/083169.html
bugzilla.redhat.com/show_bug.cgi

More vulnerabilities in sticky notes

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free