CVE:CVE-2012-3998
CNNVD:CNNVD-201207-160
Sticky Notes 0.2.27052012.5之前版本中存在多个SQL注入漏洞。远程攻击者可利用该漏洞通过（1）admin/modules/mod_pastes.php或（2）show.php中的paste id，（3）传向admin/modules/mod_users.php中的user id，（4）传向list.php的project，或（5）传向show.php的session id执行任意SQL命令。
solution:Upgrade sayakbanerjee sticky_notes to a higher version than 0.2.27052012.5,0.2.27052012.4,and avoid the version (,0.2.27052012.5],0.2.27052012.4