CVE-2026-7490

all versions

CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and e

7.2HIGH

CVE-2026-7489

all versions

CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL comman

8.8HIGH

CVE-2025-9570

all versions

The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administrator privil

4.9MEDIUM

CVE-2025-9569

all versions

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to exec

6.1MEDIUM

CVE-2025-9568

all versions

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to exec

6.1MEDIUM

CVE-2025-9567

all versions

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to exec

6.1MEDIUM

CVE-2025-54946

< 10.11

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbit

9.8CRITICAL

CVE-2025-54945

< 10.11

An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote a

9.8CRITICAL

CVE-2025-54944

< 10.11

An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allow

9.8CRITICAL

CVE-2025-54943

< 10.11

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perfo

9.8CRITICAL

CVE-2025-54942

< 10.11

A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows re

9.8CRITICAL

CVE-2025-3707

<= 10.13

The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary

6.5MEDIUM

CVE-2024-10440

< 10.0

The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL com

9.8CRITICAL

CVE-2024-10439

< 10.8

The eHRD CTMS from Sunnet has an Insecure Direct Object Reference (IDOR) vulnerability, allowing unauthenticated remote attackers

5.3MEDIUM

CVE-2024-10438

< 10.14

The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypass authenti

7.5HIGH

CVE-2023-24836

all versions

SUNNET CTMS has vulnerability of path traversal within its file uploading function. An authenticated remote attacker with general

8.8HIGH