CVE-2025-59757

AndSoft e-TMS v25.03 is affected by a reflected XSS in /clt/LOGINFRM_CATOLD.ASP, via the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn. The flaw allows an attacker to execute JavaScript in a victim’s browser when a malicious URL is clicked. Remediation guidance across sources indicates up...

CVE-2025-59757 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59756

AndSoft e-TMS v25.03 is affected by a reflected XSS vulnerability. The issue stems from insufficient filtering/escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn within the /clt/LOGINFRM_CON.ASP page, allowing an attacker to craft a malicious URL that exec...

CVE-2025-59756 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59755 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59755

CVE-2025-59755 traces to an XSS in AndSoft e-TMS v25.03. The vulnerability is a reflected XSS caused by lack of proper filtering/escaping for parameters l, demo, demo2, TNTLOGIN, UO, SuppConn in /clt/LOGINFRM_CAT.ASP, enabling JavaScript execution via a malicious URL. Connected reports from CNVD/...

CVE-2025-59754 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59754 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59754

AndSoft e-TMS v25.03 is affected by an XSS vulnerability that is reflected via the endpoints in file /clt/LOGINFRM_original.ASP. The vulnerability arises from insufficient input filtering/escaping for the parameters l , demo , demo2 , TNTLOGIN , UO , and SuppConn , allowing an attacker to cause J...

CVE-2025-59753 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59753 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59751

CVE-2025-59751 describes a reflected XSS in AndSoft e-TMS v25.03. The vulnerability arises from lack of proper filtering/escaping of user-supplied data in parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file /clt/LOGINFRM_DJO.ASP, enabling an attacker to execute JavaScript in a victi...

CVE-2025-59750 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59735

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM.ASP'...

CVE-2025-59737

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRMLXA.ASP'...

CVE-2025-59738

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRMBET.ASP'...

CVE-2025-59739

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in...

CVE-2025-59740

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRMCAT.ASP'...

CVE-2025-59736

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRMDJO.ASP'...

CVE-2025-59742

AndSoft e-TMS v25.03 contains a SQL injection vulnerability in the USRMAIL parameter of /inc/login/TRACK_REQUESTFRMSQL.ASP. The issue arises from lack of validation of externally supplied SQL statements, allowing a POST request to retrieve, create, update, and delete databases. Affected component...