Sunnet Technology Co., Ltd. vulnerabilities
10 vulnerabilities
Known vulnerabilities in Sunnet Technology Co., Ltd. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Corporate Training Management System7 vulnerabilities
- Wisdom Master Pro3 vulnerabilities
CVE-2025-54946sunnet technology co., ltd.corporate training management system+1
EPSS score0.48%
A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.CVE-2025-54945sunnet technology co., ltd.corporate training management system+1EPSS score0.54%
An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.CVE-2025-54943sunnet technology co., ltd.corporate training management system+1EPSS score0.50%
A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.CVE-2025-54942sunnet technology co., ltd.corporate training management system+1EPSS score0.47%
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.CVE-2025-54944sunnet technology co., ltd.corporate training management system+1EPSS score0.69%
An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a specific file, which may lead to arbitrary code execution.CVE-2025-31340sunnet technology co., ltd.wisdom master proEPSS score0.49%
A improper control of filename for include/require statement in PHP program vulnerability in the retrieve course Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to perform arbitrary system commands by running a malicious file.CVE-2025-31338sunnet technology co., ltd.wisdom master proEPSS score0.46%
A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to obtain partial user data by accessing the API functionality.CVE-2025-31339sunnet technology co., ltd.wisdom master proEPSS score0.46%
An unrestricted upload of file with dangerous type vulnerability in the course management function of Wisdom Master Pro versions 5.0 through 5.2 allows remote authenticated users to craft a malicious file.CVE-2024-11984sunnet technology co., ltd.corporate training management systemEPSS score0.76%
A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM privilege via a crafted ZIP file.CVE-2026-24727sunnet technology co., ltd.corporate training management systemEPSS score0.65%
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.