CTMS vulnerabilities
3 known vulnerabilities in CTMS from Sunnet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
CTMS: Unrestricted Upload of File with Dangerous Type
CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
- 8.8 High severity
CTMS: Improper Neutralization of Special Elements used in an SQL Command
CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
- 8.8 High severity
CTMS: Improper Limitation of a Pathname to a Restricted Directory
SUNNET CTMS has vulnerability of path traversal within its file uploading function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload and execute scripts onto arbitrary directories to perform arbitrary system