6 matches found
CVE-2025-9692: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...
CVE-2025-1085: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in Animati PACS up to 1.24.12.09.03. This affects an unknown part of the file /login. The manipulation of the argument p leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...
CVE-2024-12944: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signin.php. The manipulation of the argument u/p leads to sql injection. The attack may be launched remotely. The exploit has...
CVE-2024-10926: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of the file /togglefoldpanel.php of the component Tabelas Section. The manipulation of the argument p leads to cross site scripting. The attack may be initiated...
CVE-2003-0408: Undefined Security Weakness
Buffer overflow in Uptime Client UpClient 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument...
CVE-2002-0184: Incorrect Calculation of Buffer Size
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p prompt argument, which are not properly expanded...