Skip to main content
Back to all
2025-08-30

SUNNET Corporate Training Management System - SQL Injection

ZUSOART ID
ZA-2025-14
CVE ID
CVE-2025-54946
Vulnerability Type
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVSS 4.0 Base
9.3
Description

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.

Vendor
SUNNET Technology Co., Ltd.
Product
Category
Version affected
Corporate Training Management System
Before 10.11
Mitigations

Contact SUNNET Technology for version updates.

Release date
2025-08-30
Credit

Cheng Ming Yang (TW1943) of ZUSO ART