Approved changes feed: RSS · Atom
cpe:2.3:a:sunnet:wmpro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sunnet (427cdd9a-35d4-53d3-a7e8-bb1c2354a8d1) |
|---|---|
| Product | Wmpro (531328cf-f9a5-5731-b246-1ea594de0a5c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15226 |
vulnerable | 2026-06-08 07:06:35.903503 |
Sunnet｜WMPro - Arbitrary File Upload
CRITICAL (9.8)
WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Published: 2025-12-29T06:39:27.426Z
Updated: 2025-12-29T14:34:29.835Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15225 |
vulnerable | 2026-06-08 07:06:35.902179 |
Sunnet｜WMPro - Arbitrary File Read
HIGH (7.5)
WMPro developed by Sunnet has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to read arbitrary system files.
Published: 2025-12-29T06:31:49.460Z
Updated: 2025-12-29T16:45:35.087Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35851 |
vulnerable | 2026-06-08 06:06:27.897214 |
SUNNET WMPro - SQL Injection
HIGH (7.5)
SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database.
Published: 2023-09-18T02:33:59.550Z
Updated: 2024-09-25T15:44:38.562Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35850 |
vulnerable | 2026-06-08 06:06:27.895566 |
SUNNET WMPro - Command Injection
HIGH (7.2)
SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service.
Published: 2023-09-18T02:30:35.609Z
Updated: 2024-09-25T15:45:21.497Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11062 |
vulnerable | 2026-06-08 05:12:26.341416 |
SUNNET WMPro v5.0 and v5.1 has OS Command Injection
The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication.
Published: 2019-07-11T18:22:06.876Z
Updated: 2024-09-17T00:40:32.733Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.