CVE-2025-59760 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59760

Summary: CVE-2025-59760 is an XSS vulnerability in AndSoft e-TMS v25.03. The issue is reflected XSS arising from insufficient filtering/escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, SuppConn in the file /clt/LOGINFRM_DHL.ASP . An attacker can supply a malicious UR...

CVE-2025-59760 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59759 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59759 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59758 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59758 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59758

AndSoft e-TMS v25.03 is affected by a reflected XSS vulnerability. The flaw occurs in the /clt/LOGINFRM_CYLOG.ASP endpoint, where user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn can be echoed into the victim’s browser, enabling JavaScript execution via a malicious ...

CVE-2025-59757 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59757 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59757

AndSoft e-TMS v25.03 is affected by a reflected XSS in /clt/LOGINFRM_CATOLD.ASP, via the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn. The flaw allows an attacker to execute JavaScript in a victim’s browser when a malicious URL is clicked. Remediation guidance across sources indicates up...

CVE-2025-59756 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59756

AndSoft e-TMS v25.03 is affected by a reflected XSS vulnerability. The issue stems from insufficient filtering/escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn within the /clt/LOGINFRM_CON.ASP page, allowing an attacker to craft a malicious URL that exec...

CVE-2025-59755

CVE-2025-59755 traces to an XSS in AndSoft e-TMS v25.03. The vulnerability is a reflected XSS caused by lack of proper filtering/escaping for parameters l, demo, demo2, TNTLOGIN, UO, SuppConn in /clt/LOGINFRM_CAT.ASP, enabling JavaScript execution via a malicious URL. Connected reports from CNVD/...

CVE-2025-59754 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59754

AndSoft e-TMS v25.03 is affected by an XSS vulnerability that is reflected via the endpoints in file /clt/LOGINFRM_original.ASP. The vulnerability arises from insufficient input filtering/escaping for the parameters l , demo , demo2 , TNTLOGIN , UO , and SuppConn , allowing an attacker to cause J...

CVE-2025-59753

The CVE-2025-59753 entries describe a reflected Cross-Site Scripting (XSS) vulnerability in AndSoft e-TMS v25.03. The issue stems from insufficient filtering/escaping of user-supplied data in parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn within /clt/LOGINFRM_BET.ASP, allowing an attacker ...

CVE-2025-59753 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59753 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59752 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...