VULNERABILITY INTELLIGENCE

CVE-2025-59741

CVSS score9.8 CRITICAL

EPSS probability1.27%

CISA KEVNot currently listed

Published2025-10-02

Last modified2026-10-12

Description

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/CLT/LOGINERRORFRM.ASP'.