5136 matches found
CVE-2025-40640 Stored Cross-Site Scripting (XSS) in Energy CRM by Status Tracker
Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createinvoicesubmit.php”, using the “customerName0” parameter. This vulnerability could allow a...
CVE-2025-40640
Energy CRM v2025 (Status Tracker Ltd) contains a stored Cross-Site Scripting (XSS) flaw exploitable via a POST to /crm/create_invoice_submit.php using the customerName_0 parameter. Lack of input validation allows a remote attacker to craft a query that could be processed by an authenticated user,...
PT-2025-41534
Name of the Vulnerable Software and Affected Versions Energy CRM version 2025 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. A remote user can potentially send a malicious query to an authenticated user, potentially leading to the...
EUVD-2012-2229
Malware in sbrugna...
EUVD-2011-4971
Malware in sbrugna...
EUVD-2011-4969
Malware in sbrugna...
EUVD-2003-0268
Malware in sbrugna...
EUVD-2018-10608
Malware in sbrugna...
EUVD-2006-0254
Malware in sbrugna...
EUVD-2014-6738
Malware in sbrugna...
EUVD-2013-0740
Malware in sbrugna...
EUVD-2011-4973
Malware in sbrugna...
EUVD-2011-4970
Malware in sbrugna...
EUVD-2006-0324
Malware in sbrugna...
EUVD-2013-3670
Malware in sbrugna...
EUVD-2021-22588
Malware in sbrugna...
EUVD-2006-1674
Malware in sbrugna...
EUVD-2017-14344
Malware in sbrugna...