PT-2025-40390 · Wandsoft · Andsoft E-Tms
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
AndSoft e-TMS version 25.03
Description
A cross-site scripting (XSS) issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the
/clt/LOGINFRM MOL.ASP endpoint, specifically through the l, demo, demo2, TNTLOGIN, UO, and SuppConn parameters.Recommendations
Apply updates to address the issue in AndSoft e-TMS version 25.03.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Andsoft E-Tms