CVE-2025-3021

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...

CVE-2025-3021

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...

CVE-2025-3021: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...

E-Solutions E-Management 操作系统命令注入漏洞

E-Solutions E-Management is an application from E-Solutions, Inc. An operating system command injection vulnerability exists in E-Solutions E-Management, which stems from the presence of command injection that could lead to the execution of arbitrary commands on the server...

CVE-2025-3022: Improper Neutralization of Special Elements used in an OS Command

Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint...