Lucene search
K

8 matches found

CNVD
CNVD
added 2025/10/13 12:0 a.m.4 views

AndSoft e-TMS Path Traversal Vulnerability

AndSoft e-TMS is a logistics management software from AndSoft Spain. A path traversal vulnerability exists in AndSoft e-TMS, which stems from the docurl parameter failing to properly filter special elements in the path of a resource or file, and can be exploited by an attacker to gain access to a...

8.7CVSS7.1AI score0.00079EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-32128

Malicious code in bioql PyPI...

8.7CVSS6.6AI score0.00079EPSS
Exploits0References2
OSV
OSV
added 2025/10/02 3:15 p.m.0 views

CVE-2025-59744

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”...

7.5CVSS5.8AI score0.00079EPSS
Exploits0References1
NVD
NVD
added 2025/10/02 3:15 p.m.6 views

CVE-2025-59744

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”...

8.7CVSS0.00079EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/02 2:16 p.m.4 views

CVE-2025-59744 Multiple vulnerabilities in AndSoft's e-TMS

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”...

8.7CVSS0.00079EPSS
Exploits0References1
CVE
CVE
added 2025/10/02 2:16 p.m.12 views

CVE-2025-59744

AndSoft e-TMS v25.03 suffers a path traversal in the docurl parameter of /lib/asp/DOCSAVEASASP.ASP, due to insufficient filtering of path elements. This allows access to files within the web root. Documented in multiple sources (NVD/CNVD/CNNVD) with no explicit remediation details provided in the...

8.7CVSS6.6AI score0.00079EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/02 2:16 p.m.4 views

CVE-2025-59744 Multiple vulnerabilities in AndSoft's e-TMS

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”...

8.7CVSS6.6AI score0.00079EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/02 12:0 a.m.3 views

AndSoft e-TMS 路径遍历漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. A path traversal vulnerability exists in AndSoft e-TMS, which stems from the docurl parameter failing to properly filter special elements in the path of a resource or file, and can be exploited by an attacker to gain access to a...

8.7CVSS7AI score0.00079EPSS
Exploits0References1
Rows per page
Query Builder