CVE Feed

    Dashboard / CVE / CVE-2025-59735

    CVE-2025-59735

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM.ASP'.

    Published:Oct 2, 2025
    Last Modified:Oct 2, 2025
    EPS:Oct 2, 2025
    EPSS Score:
    CVSS Score:9.8

    Affected Products

    Vendor
    Andsoft
    Product
    E-tms

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-59774 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…
    CVE-2025-59773 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…
    CVE-2025-59772 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…
    CVE-2025-59771 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…
    CVE-2025-59770 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…
    CVE-2025-59769 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…
    CVE-2025-59768 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…
    CVE-2025-59767 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…
    CVE-2025-59766 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…
    CVE-2025-59765 (CVSS 5.1) — Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an att…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High