Critical severityNVD Advisory· Published Mar 31, 2025· Updated Apr 15, 2026

CVE-2025-3022

Description

Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PuneethReddyHC/Event Managementllm-fuzzy

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-e-management-e-solutionsnvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000