Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: SUNNET Technology Corporate Training Management System 10.11 Clear all filters
TI-2025-34666 CVE-2025-54946 · GHSA-v8qv-xx7v-pc2c

SUNNET Corporate Training Management System - SQL Injection

Priority MEDIUM 49

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00481 Published 2025-08-30 Fixed in 10.11 CWE-89
TI-2025-34665 CVE-2025-54945 · GHSA-mhm4-qp75-jmxw

SUNNET Corporate Training Management System - External Control of File Name or Path

Priority MEDIUM 50

An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the dest…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00536 Published 2025-08-30 Fixed in 10.11 CWE-73
TI-2025-34664 CVE-2025-54944 · GHSA-p4wg-48wq-x28w

SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type

Priority LOW 38

An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a specific file, which may lead to arbitrary…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00685 Published 2025-08-30 Fixed in 10.11 CWE-434
TI-2025-34663 CVE-2025-54943 · GHSA-7cmq-hgvr-hmwp

SUNNET Corporate Training Management System - Missing Authorization

Priority MEDIUM 49

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00496 Published 2025-08-30 Fixed in 10.11 CWE-862