CVE-2026-108834

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

CVE-2026-108834

A cross-site scripting (XSS) vulnerability exists in Cairo-dock Glx-Dock up to version 3.4.0 . The flaw is located in the Query Parameter Handler component, specifically involving the processing of the ww_page.php file. By manipulating the p argument, an attacker can execute a remote XSS attack. ...

EUVD-2026-97361

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

PT-2026-110545

Name of the Vulnerable Software and Affected Versions Cairo-dock Glx-Dock versions prior to 3.4.1 Description Remote cross site scripting is possible due to improper processing of the p argument within the Query Parameter Handler component in the ww page.php file. Cross site scripting is a...

CVE-2025-9692: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

PT-2025-5897

Name of the Vulnerable Software and Affected Versions Animati PACS versions up to 1.24.12.09.03 Description A problematic issue was found in Animati PACS, affecting an unknown part of the file /login. The manipulation of the p argument leads to cross-site scripting. It is possible to initiate the...

CVE-2025-1085: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Animati PACS up to 1.24.12.09.03. This affects an unknown part of the file /login. The manipulation of the argument p leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2024-12944: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signin.php. The manipulation of the argument u/p leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2024-10926: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of the file /togglefoldpanel.php of the component Tabelas Section. The manipulation of the argument p leads to cross site scripting. The attack may be initiated...

CVE-2024-8875

A vulnerability classified as critical was found in vedees wcms up to 0.3.2. Affected by this vulnerability is an unknown functionality of the file /wex/finder.php. The manipulation of the argument p leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to t...

CVE-2003-0408: Undefined Security Weakness

Buffer overflow in Uptime Client UpClient 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument...

CVE-2002-0184: Incorrect Calculation of Buffer Size

Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p prompt argument, which are not properly expanded...