Sunnet Technology Co., Ltd. Corporate Training Management System vulnerabilities
7 vulnerabilities
Known vulnerabilities in Sunnet Technology Co., Ltd. Corporate Training Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-54946sunnet technology co., ltd.corporate training management system+1
EPSS score0.48%
A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.CVE-2025-54945sunnet technology co., ltd.corporate training management system+1EPSS score0.54%
An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.CVE-2025-54943sunnet technology co., ltd.corporate training management system+1EPSS score0.50%
A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.CVE-2025-54942sunnet technology co., ltd.corporate training management system+1EPSS score0.47%
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.CVE-2025-54944sunnet technology co., ltd.corporate training management system+1EPSS score0.69%
An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a specific file, which may lead to arbitrary code execution.CVE-2024-11984sunnet technology co., ltd.corporate training management systemEPSS score0.76%
A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM privilege via a crafted ZIP file.CVE-2026-24727sunnet technology co., ltd.corporate training management systemEPSS score0.65%
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.