AndSoft e-TMS SQL Injection

The vulnerability of the AndSoft e-TMS transportation management software lies in the lack of measures taken to protect the SQL query structure during the processing of the USRMAIL parameter. Exploiting this vulnerability can allow an attacker to remotely gain access to the ability to create,...

CVE-2025-59742 Multiple vulnerabilities in AndSoft's e-TMS

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'USRMAIL' parameter in'/inc/login/TRACKREQUESTFRMSQL.ASP'...