Maximilian Hildebrand

Cross-site scripting (XSS) allows JavaScript to be executed by the victim's browser, enabling an attacker to control the browser.

A cross-site scripting issue exists that allows an attacker to execute JavaScript code in a victim's browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the `/clt/LOGINFRM DHL.ASP` endpoint, specifically through the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters.

An operating system command injection issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is exploitable by sending a POST request to the '/clt/LOGINFRM LXA.ASP' endpoint with a malicious payload in the `m` parameter.

A cross-site scripting (XSS) issue exists that allows an attacker to execute JavaScript code in a victim's browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the `/clt/LOGINFRM DJO.ASP` endpoint and involves the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters.

A cross-site scripting issue exists that allows an attacker to execute JavaScript code in a user's browser. This is achieved by sending a malicious URL to a victim. The vulnerability is reflected in the `/clt/LOGINFRM BET.ASP` endpoint, specifically through the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters.

A cross-site scripting issue exists that could allow an attacker to execute JavaScript code in a user's browser. This is achieved by sending a malicious URL to a victim. The vulnerability is reflected in the `/clt/LOGINFRM DELCROIX.ASP` endpoint, specifically through the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters.

A cross-site scripting (XSS) issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the `/clt/LOGINFRM LXA.ASP` endpoint and involves the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters.

A cross-site scripting (XSS) issue exists that allows an attacker to execute JavaScript code in a victim's browser. This is achieved by sending a malicious URL. The vulnerability is reflected through the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters in the '/clt/LOGINFRM CAT.ASP' API endpoint.

An operating system command injection issue exists in AndSoft's e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is exploitable by sending a POST request to the '/clt/LOGINFRM original.ASP' endpoint with a malicious payload in the `m` parameter.

An operating system command injection issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is triggered by sending a POST request to the `/clt/LOGINFRM CAT.ASP` endpoint, specifically through the `m` parameter.

An operating system command injection issue exists that allows an attacker to execute operating system commands on the server. This is achieved by sending a POST request to the `/CLT/LOGINERRORFRM.ASP` endpoint, utilizing the `m` parameter.

An operating system command injection issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is triggered by sending a POST request to the `/clt/LOGINFRM.ASP` API endpoint, specifically through the `m` parameter.

An operating system command injection issue exists in AndSoft's e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is triggered by sending a POST request to the `/clt/LOGINFRM DJO.ASP` endpoint, exploiting the `m` parameter.

A cross-site scripting (XSS) issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the `/clt/LOGINFRM CYLOG.ASP` API endpoint, specifically through the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters.

A cross-site scripting issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute JavaScript code in a victim’s browser by sending a malicious URL. The vulnerability is reflected through the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters within the '/clt/LOGINFRM CON.ASP' file.

A cross-site scripting issue exists that allows an attacker to execute JavaScript code in a victim's browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the `/clt/LOGINFRM.ASP` endpoint, specifically through the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters.

An operating system command injection issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is triggered by sending a POST request to the ''/clt/LOGINFRM BET.ASP'' endpoint with a malicious payload in the `m` parameter.

A cross-site scripting issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the `/clt/LOGINFRM original.ASP` endpoint and involves the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters.

A cross-site scripting issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The issue is related to the `l` parameter in the '/clt/TRACK REQUEST.ASP' API endpoint.

A cross-site scripting (XSS) issue exists that allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL. The vulnerability is reflected in the `/clt/LOGINFRM CATOLD.ASP` endpoint, involving the `l`, `demo`, `demo2`, `TNTLOGIN`, `UO`, and `SuppConn` parameters.