Approved changes feed: RSS · Atom

cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSun.Net (d0dc7899-8489-5e38-a980-d5da8f355e5f)
ProductEhrd Ctms (55107a35-431a-5fe7-bc70-c0e40a60c593)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7490 vulnerable 2026-06-08 08:08:57.299631 Sunnet|CTMS and CPAS - Arbitrary File Upload
HIGH (7.2)
CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Published: 2026-05-02T09:06:25.153Z
Updated: 2026-05-04T14:56:10.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7489 vulnerable 2026-06-08 08:08:57.296575 Sunnet|CTMS - SQL Injection
HIGH (8.8)
CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Published: 2026-05-02T09:02:21.813Z
Updated: 2026-05-04T13:42:08.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54946 vulnerable 2026-06-08 07:33:13.819094 SUNNET Corporate Training Management System - SQL Injection
A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.
Published: 2025-08-30T03:58:59.408Z
Updated: 2026-01-30T03:35:51.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54945 vulnerable 2026-06-08 07:33:13.818723 SUNNET Corporate Training Management System - External Control of File Name or Path
An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.
Published: 2025-08-30T03:50:54.588Z
Updated: 2026-01-30T03:36:16.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54944 vulnerable 2026-06-08 07:33:13.818434 SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a specific file, which may lead to arbitrary code execution.
Published: 2025-08-30T03:45:58.614Z
Updated: 2026-01-30T03:36:54.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54943 vulnerable 2026-06-08 07:33:13.817894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54942 vulnerable 2026-06-08 07:33:13.817510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3707 vulnerable 2026-06-08 07:23:09.706552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10440 vulnerable 2026-06-08 06:23:46.554918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10439 vulnerable 2026-06-08 06:23:46.554383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10438 vulnerable 2026-06-08 06:23:46.553486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.