Ehrd Ctms
Sunnet · 16 CVEs
Sunnet｜CTMS and CPAS - Arbitrary File Upload
May 2, 2026
Sunnet｜CTMS - SQL Injection
May 2, 2026
Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal
Sep 1, 2025
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
Sep 1, 2025
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
Sep 1, 2025
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
Sep 1, 2025
SUNNET Corporate Training Management System - SQL Injection
Aug 30, 2025
SUNNET Corporate Training Management System - External Control of File Name or Path
Aug 30, 2025
SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
Aug 30, 2025
SUNNET Corporate Training Management System - Missing Authorization
Aug 30, 2025
SUNNET Corporate Training Management System - Missing Authentication for Critical Function
Aug 30, 2025
Sunnet eHRD CTMS - SQL Injection
May 2, 2025
Sunnet eHRD CTMS - SQL Injection
Oct 28, 2024
Sunnet eHRD CTMS - Insecure Direct Object Reference
Oct 28, 2024
Sunnet eHRD CTMS - Authentication Bypass
Oct 28, 2024
SUNNET CTMS - Path Traversal
Apr 27, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-7490 | Sunnet｜CTMS and CPAS - Arbitrary File Upload | HIGH | 0.83% | May 2, 2026 |
| CVE-2026-7489 | Sunnet｜CTMS - SQL Injection | HIGH | 0.55% | May 2, 2026 |
| CVE-2025-9570 | Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal | MEDIUM | 0.52% | Sep 1, 2025 |
| CVE-2025-9569 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting | MEDIUM | 0.26% | Sep 1, 2025 |
| CVE-2025-9568 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting | MEDIUM | 0.26% | Sep 1, 2025 |
| CVE-2025-9567 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting | MEDIUM | 0.26% | Sep 1, 2025 |
| CVE-2025-54946 | SUNNET Corporate Training Management System - SQL Injection | CRITICAL | 0.48% | Aug 30, 2025 |
| CVE-2025-54945 | SUNNET Corporate Training Management System - External Control of File Name or Path | CRITICAL | 0.54% | Aug 30, 2025 |
| CVE-2025-54944 | SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type | MEDIUM | 0.69% | Aug 30, 2025 |
| CVE-2025-54943 | SUNNET Corporate Training Management System - Missing Authorization | CRITICAL | 0.50% | Aug 30, 2025 |
| CVE-2025-54942 | SUNNET Corporate Training Management System - Missing Authentication for Critical Function | CRITICAL | 0.47% | Aug 30, 2025 |
| CVE-2025-3707 | Sunnet eHRD CTMS - SQL Injection | MEDIUM | 0.43% | May 2, 2025 |
| CVE-2024-10440 | Sunnet eHRD CTMS - SQL Injection | CRITICAL | 0.55% | Oct 28, 2024 |
| CVE-2024-10439 | Sunnet eHRD CTMS - Insecure Direct Object Reference | HIGH | 0.40% | Oct 28, 2024 |
| CVE-2024-10438 | Sunnet eHRD CTMS - Authentication Bypass | HIGH | 0.53% | Oct 28, 2024 |
| CVE-2023-24836 | SUNNET CTMS - Path Traversal | HIGH | 1.19% | Apr 27, 2023 |
Showing 1 to 16 of 16 CVEs