Corporate Training Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:sunnet_technology_co.,_ltd.:corporate_training_management_system:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sunnet Technology Co., Ltd. (c25e9b18-ed7e-5a7e-bae6-7c065a69c161) |
|---|---|
| Product | Corporate Training Management System (da2edf87-e1c8-58d6-8cd2-759f37a6bd5c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24727 |
vulnerable | 2026-07-29 00:32:01.502156 |
SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.
Published: 2026-07-24T08:29:06.889Z
Updated: 2026-07-24T12:33:09.459Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54946 |
vulnerable | 2026-06-08 07:33:13.818963 |
SUNNET Corporate Training Management System - SQL Injection
A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.
Published: 2025-08-30T03:58:59.408Z
Updated: 2026-01-30T03:35:51.090Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54945 |
vulnerable | 2026-06-08 07:33:13.818691 |
SUNNET Corporate Training Management System - External Control of File Name or Path
An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.
Published: 2025-08-30T03:50:54.588Z
Updated: 2026-01-30T03:36:16.021Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54944 |
vulnerable | 2026-06-08 07:33:13.818167 |
SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a specific file, which may lead to arbitrary code execution.
Published: 2025-08-30T03:45:58.614Z
Updated: 2026-01-30T03:36:54.998Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54943 |
vulnerable | 2026-06-08 07:33:13.817856 |
SUNNET Corporate Training Management System - Missing Authorization
A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.
Published: 2025-08-30T03:42:00.229Z
Updated: 2026-01-30T03:37:33.679Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54942 |
vulnerable | 2026-06-08 07:33:13.816691 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11984 |
vulnerable | 2026-06-08 06:23:50.812194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.