CVE-20XX-?
agent?

Andsoft e-tms CVEs.

Published CVEs affecting Andsoft e-tms, ranked by exploit odds.

40 CVEs · updated 2026-11-06 21:21 UTC

  1. CVE-2025-59735

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM.ASP'.

    Injection Server Andsoft e-tms

    9.3 CRITICAL 1% exploit odds No fix listed
  2. CVE-2025-59736

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_DJO.ASP'.

    Injection Server Andsoft e-tms

    9.3 CRITICAL 1% exploit odds No fix listed
  3. CVE-2025-59737

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_LXA.ASP'.

    Injection Server Andsoft e-tms

    9.3 CRITICAL 1% exploit odds No fix listed
  4. CVE-2025-59738

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_BET.ASP'.

    Injection Server Andsoft e-tms

    9.3 CRITICAL 1% exploit odds No fix listed
  5. CVE-2025-59739

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_original.ASP'.

    Injection Server Andsoft e-tms

    9.3 CRITICAL 1% exploit odds No fix listed
  6. CVE-2025-59740

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_CAT.ASP'.

    Injection Server Andsoft e-tms

    9.3 CRITICAL 1% exploit odds No fix listed
  7. CVE-2025-59741

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/CLT/LOGINERRORFRM.ASP'.

    Injection Server Andsoft e-tms

    9.3 CRITICAL 1% exploit odds No fix listed
  8. CVE-2025-59744

    Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”.

    Disclosure Andsoft e-tms

    8.7 HIGH 0.5% exploit odds No fix listed
  9. CVE-2025-59742

    SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'USRMAIL' parameter in'/inc/login/TRACK_REQUESTFRMSQL.ASP'.

    Injection Andsoft e-tms

    9.3 CRITICAL 0.4% exploit odds No fix listed
  10. CVE-2025-59743

    SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'.

    Injection Andsoft e-tms

    9.3 CRITICAL 0.4% exploit odds No fix listed
  11. CVE-2025-59746

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'm' parameter in '/lib/asp/alert.asp'.

    XSS Browser & mail Andsoft e-tms

    6.9 MEDIUM 0.3% exploit odds No fix listed
  12. CVE-2025-59745

    Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.

    Crypto Andsoft e-tms

    6.9 MEDIUM 0.2% exploit odds No fix listed
  13. CVE-2025-59747

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' parameter in '/clt/resetPassword.asp'.

    XSS Browser & mail Andsoft e-tms

    6.9 MEDIUM 0.2% exploit odds No fix listed
  14. CVE-2025-59748

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' and 'reset' parameters in '/clt/changepassword.asp'.

    XSS Browser & mail Andsoft e-tms

    6.9 MEDIUM 0.2% exploit odds No fix listed
  15. CVE-2025-59749

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' parameter in '/clt/TRACK_REQUEST.ASP'.

    XSS Browser & mail Andsoft e-tms

    6.9 MEDIUM 0.2% exploit odds No fix listed
  16. CVE-2025-59774

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_VON.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  17. CVE-2025-59754

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_original.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  18. CVE-2025-59756

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in 'SuppConn in /clt/LOGINFRM_CON.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  19. CVE-2025-59750

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  20. CVE-2025-59751

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DJO.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  21. CVE-2025-59752

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LXA.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  22. CVE-2025-59753

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_BET.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  23. CVE-2025-59755

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CAT.ASP'.

    XSS Browser & mail Andsoft e-tms

    6.9 MEDIUM 0.2% exploit odds No fix listed
  24. CVE-2025-59757

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CATOLD.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  25. CVE-2025-59758

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CYLOG.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  26. CVE-2025-59759

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DELCROIX.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  27. CVE-2025-59760

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DHL.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  28. CVE-2025-59761

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DLG.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  29. CVE-2025-59762

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DLG.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  30. CVE-2025-59763

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_EK.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  31. CVE-2025-59764

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_FCC.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  32. CVE-2025-59765

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LF.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  33. CVE-2025-59766

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LT.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  34. CVE-2025-59767

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LVE.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  35. CVE-2025-59768

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MNG.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  36. CVE-2025-59769

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MOL.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  37. CVE-2025-59770

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MON.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  38. CVE-2025-59771

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MRK.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  39. CVE-2025-59772

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_SIL.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed
  40. CVE-2025-59773

    Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_TP.ASP'.

    XSS Browser & mail Andsoft e-tms

    5.1 MEDIUM 0.2% exploit odds No fix listed

All CVEs affecting Andsoft e-tms that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.