AndSoft e-TMS vulnerabilities

AndSoft e-TMS v25.03 is vulnerable to SQL injection in /inc/connect/CONNECTION.ASP via the 'SessionID' cookie. An attacker can send a POST request to retrieve, create, update, and delete database data.

SQL injection vulnerability in AndSoft's e-TMS v25.03. It exists in the 'USRMAIL' parameter in '/inc/login/TRACK_REQUESTFRMSQL.ASP' and allows an attacker to retrieve, create, update, and delete databases by sending a POST request.

An operating system command injection vulnerability exists in AndSoft's e-TMS v25.03.03. An attacker can execute arbitrary OS commands on the server by sending a crafted POST request with the 'm' parameter to '/CLT/LOGINERRORFRM.ASP'.

AndSoft e-TMS v25.03 is vulnerable to operating system command injection via the 'm' parameter in /clt/LOGINFRM_CAT.ASP. An attacker can send a POST request to execute arbitrary commands on the server.

AndSoft e-TMS v25.03 is vulnerable to operating system command injection via the 'm' parameter in /clt/LOGINFRM_original.ASP. An attacker can send a POST request to execute arbitrary commands on the server.

AndSoft e-TMS v25.03 is vulnerable to operating system command injection via the 'm' parameter in /clt/LOGINFRM_BET.ASP. An attacker can send a POST request to execute arbitrary commands on the server.

AndSoft e-TMS v25.03 is vulnerable to operating system command injection via the 'm' parameter in /clt/LOGINFRM_LXA.ASP. An attacker can send a POST request to execute arbitrary commands on the server.

AndSoft e-TMS v25.03 is vulnerable to operating system command injection via the 'm' parameter in /clt/LOGINFRM_DJO.ASP. An attacker can send a POST request to execute arbitrary commands on the server.

AndSoft e-TMS v25.03 is vulnerable to operating system command injection via the 'm' parameter in /clt/LOGINFRM.ASP. An attacker can send a POST request to execute arbitrary commands on the server.

AndSoft e-TMS v25.03 contains a reflected Cross-Site Scripting (XSS) vulnerability. An attacker can execute JavaScript code in the victim's browser by sending a malicious URL with parameters 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in the path '/clt/LOGINFRM_VON.ASP'.

Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_TP.ASP'.

Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_SIL.ASP'.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. It allows an attacker to execute JavaScript in the victim's browser via a malicious URL. Parameters 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_MRK.ASP' are affected.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_MON.ASP'.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_MOL.ASP'.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_MNG.ASP'.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_LVE.ASP'.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_LT.ASP'.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_LF.ASP'.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_FCC.ASP'.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_EK.ASP'.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_DLG.ASP'.

Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_DLG.ASP'.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DHL.ASP' are affected.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CYLOG.ASP' are affected.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CATOLD.ASP' are affected.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. It allows an attacker to execute JavaScript in the victim's browser via a malicious URL. Parameters 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in 'SuppConn in /clt/LOGINFRM_CON.ASP' are affected.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CAT.ASP' are affected.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. It allows an attacker to execute JavaScript in the victim's browser via a malicious URL. Parameters 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_original.ASP' are affected.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_BET.ASP' are affected.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LXA.ASP' are affected.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DJO.ASP' are affected.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM.ASP' are affected.

Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' parameter in '/clt/TRACK_REQUEST.ASP'.

Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' and 'reset' parameters in '/clt/changepassword.asp'.

Reflected XSS vulnerability in AndSoft's e-TMS v25.03. It allows an attacker to execute JavaScript in the victim's browser by sending a malicious URL. The 'l' parameter in '/clt/resetPassword.asp' is affected.

Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'm' parameter in '/lib/asp/alert.asp'.

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”.