Lucene search
+L

340 matches found

Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.17 views

PT-2025-40379

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description A cross-site scripting XSS issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the...

6.1CVSS5.9AI score0.00194EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.11 views

AndSoft e-TMS 命令注入漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from improper manipulation of parameter m. An attacker can exploit this vulnerability by sending a POST request to execute an operati...

9.8CVSS7.7AI score0.01381EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.14 views

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. A cross-site scripting vulnerability exists in AndSoft e-TMS v25.03, which originates from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the fi...

6.1CVSS6.3AI score0.00194EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.9 views

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...

6.1CVSS6.4AI score0.00194EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.14 views

PT-2025-40389

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description A cross-site scripting XSS issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the...

6.1CVSS5.9AI score0.00194EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.14 views

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...

6.1CVSS6.4AI score0.00194EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.13 views

PT-2025-40377

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description A cross-site scripting issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute JavaScript code in a victim’s browser by sending a malicious URL. The vulnerability is reflected...

6.1CVSS6AI score0.00205EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.11 views

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from the Spanish company AndSoft. A cross-site scripting vulnerability exists in AndSoft e-TMS v25.03, which stems from insufficient validation of parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file /clt/LOGINFRMDLG.ASP, which could...

6.1CVSS5.9AI score0.00194EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.13 views

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...

6.1CVSS6.4AI score0.00205EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.27 views

PT-2025-40391

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description A cross-site scripting XSS issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the...

6.1CVSS5.9AI score0.00194EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.10 views

AndSoft e-TMS 命令注入漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from a misuse of the parameter m in the file /clt/LOGINFRMBET.ASP, which can be exploited by an attacker to execute operating system...

9.8CVSS7.9AI score0.01381EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.18 views

PT-2025-40384

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description A cross-site scripting XSS issue exists that allows an attacker to execute JavaScript code in a victim's browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the...

6.1CVSS6AI score0.00194EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.14 views

PT-2025-40369

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description A cross-site scripting XSS issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected through the l...

6.9CVSS5.9AI score0.00237EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.11 views

AndSoft e-TMS 加密问题漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an encryption issue vulnerability that stems from the use of MD5 encrypted passwords, which can be exploited by an attacker to cause the disclosure of user credentials...

7.5CVSS6.7AI score0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.9 views

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...

6.1CVSS6.4AI score0.00207EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.15 views

PT-2025-40382

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description A cross-site scripting XSS issue exists that allows an attacker to execute JavaScript code in a victim's browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the...

6.1CVSS5.8AI score0.00194EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.10 views

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...

6.1CVSS6.4AI score0.00194EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.10 views

PT-2025-40380

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description A cross-site scripting issue exists that could allow an attacker to execute JavaScript code in a user's browser. This is achieved by sending a malicious URL to a victim. The vulnerability is reflected in...

6.1CVSS6.5AI score0.00194EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.13 views

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. A cross-site scripting vulnerability exists in AndSoft e-TMS, which stems from the lack of effective filtering and escaping of user-supplied data in the parameter l of /clt/resetPassword.asp, which can be exploited by an attacke...

6.9CVSS6.4AI score0.00237EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.11 views

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...

6.1CVSS6.4AI score0.00194EPSS
SaveExploits0References1
Rows per page
Query Builder