CVE-2025-59740 — Multiple vulnerabilities in AndSoft's e-TMS
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a…
Published: 2025-10-02 · CVSS: 9.3 · CVSS 4.0
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_CAT.ASP'.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7