Approved changes feed: RSS · Atom

cpe:2.3:a:sun.net:wmpro:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

VendorSun.Net (d0dc7899-8489-5e38-a980-d5da8f355e5f)
ProductWmpro (7b9a0873-8e53-522c-a80a-036efe52cc8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35851 vulnerable 2026-06-08 06:06:27.897356 SUNNET WMPro - SQL Injection
HIGH (7.5)
SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database.
Published: 2023-09-18T02:33:59.550Z
Updated: 2024-09-25T15:44:38.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35850 vulnerable 2026-06-08 06:06:27.896644 SUNNET WMPro - Command Injection
HIGH (7.2)
SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service.
Published: 2023-09-18T02:30:35.609Z
Updated: 2024-09-25T15:45:21.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11062 vulnerable 2026-06-08 05:12:26.342231 SUNNET WMPro v5.0 and v5.1 has OS Command Injection
The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication.
Published: 2019-07-11T18:22:06.876Z
Updated: 2024-09-17T00:40:32.733Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.