Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-54946 EUVD-2025-26251GHSA-v8qv-xx7v-pc2c

SUNNET Corporate Training Management System - SQL Injection

Published Aug 30, 2025 · Updated Jan 30, 2026 · Assigned by ZUSO ART

Vendor: Sunnet Product: Corporate Training Management System

Description

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.

Affected products

VendorProductAffectedFixed
SUNNET Technology Corporate Training Management System < 10.11 10.11

References