Online Note Sharing
Monthly
SQL injection in Online Note Sharing 1.0 login page allows remote unauthenticated attackers to inject malicious SQL via username/password fields, potentially extracting or modifying database contents. A public proof-of-concept exploit exists, but EPSS indicates very low exploitation probability (0.06%).
Unrestricted file upload in Online Note Sharing 1.0 allows authenticated attackers to upload arbitrary files via the profile image handler, potentially leading to remote code execution. The vulnerability exists in the /
SQL injection in Online Note Sharing 1.0 login page allows remote unauthenticated attackers to inject malicious SQL via username/password fields, potentially extracting or modifying database contents. A public proof-of-concept exploit exists, but EPSS indicates very low exploitation probability (0.06%).
Unrestricted file upload in Online Note Sharing 1.0 allows authenticated attackers to upload arbitrary files via the profile image handler, potentially leading to remote code execution. The vulnerability exists in the /