Corporate Training Management System vulnerabilities

6 known vulnerabilities in Corporate Training Management System from SUNNET Technology. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Corporate Training Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2026-24727Jul 24, 2026SUNNET Technology

  An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by

• 9.8 Critical severity

  Corporate Training Management System: External Control of File Name or Path

  CVE-2025-54945Aug 30, 2025SUNNET Technology

  An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.

• 9.8 Critical severity

  Corporate Training Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2025-54944Aug 30, 2025SUNNET Technology

  An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a specific file, which may lead to arbitrary code execution.

• 9.8 Critical severity

  Corporate Training Management System: Missing Authorization

  CVE-2025-54943Aug 30, 2025SUNNET Technology

  A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

• 9.8 Critical severity

  Corporate Training Management System: Missing Authentication for Critical Functionality

  CVE-2025-54942Aug 30, 2025SUNNET Technology

  A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.

• 9.4 Critical severity

  Corporate Training Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2024-11984Dec 19, 2024SUNNET Technology

  A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM