Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/02 12:00 a.m.•6 views

CVE-2025-59743: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

9.8CVSS8.1AI score0.00352EPSS
SaveExploits0References3
Rows per page
Query Builder