SUNNET Technology vulnerabilities
We track 7 vulnerabilities in SUNNET Technology products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on July 24, 2026.
Latest SUNNET Technology vulnerabilities
- 9.3 Critical severity
Corporate Training Management System: Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by
- 9.8 Critical severity
Corporate Training Management System: External Control of File Name or Path
An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.
- 9.8 Critical severity
Corporate Training Management System: Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a specific file, which may lead to arbitrary code execution.
- 9.8 Critical severity
Corporate Training Management System: Missing Authorization
A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.
- 9.8 Critical severity
Corporate Training Management System: Missing Authentication for Critical Functionality
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.
- 9.9 Critical severity
Wisdom Master Pro: Improper Control of Filename for Include/Require Statement in PHP Program
A improper control of filename for include/require statement in PHP program vulnerability in the retrieve course Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to perform arbitrary system commands by running a malici
- 9.4 Critical severity
Corporate Training Management System: Unrestricted Upload of File with Dangerous Type
A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM