Approved changes feed: RSS · Atom
cpe:2.3:a:sunnet:ctms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sunnet (427cdd9a-35d4-53d3-a7e8-bb1c2354a8d1) |
|---|---|
| Product | Ctms (722884da-f130-557a-bff6-183df1446d32) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7490 |
vulnerable | 2026-06-08 08:08:57.297124 |
Sunnet｜CTMS and CPAS - Arbitrary File Upload
HIGH (7.2)
CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Published: 2026-05-02T09:06:25.153Z
Updated: 2026-05-04T14:56:10.986Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7489 |
vulnerable | 2026-06-08 08:08:57.294095 |
Sunnet｜CTMS - SQL Injection
HIGH (8.8)
CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Published: 2026-05-02T09:02:21.813Z
Updated: 2026-05-04T13:42:08.020Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24836 |
vulnerable | 2026-06-08 05:56:06.301864 |
SUNNET CTMS - Path Traversal
HIGH (8.8)
SUNNET CTMS has vulnerability of path traversal within its file uploading function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload and execute scripts onto arbitrary directories to perform arbitrary system operation or disrupt service.
Published: 2023-04-27T00:00:00.000Z
Updated: 2025-01-30T21:13:35.314Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.