2025-08-30

SUNNET Corporate Training Management System - SQL Injection

ZUSOART ID

ZA-2025-14

CVE ID

CVE-2025-54946

Vulnerability Type

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVSS 4.0 Base

9.3

Description

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.

Vendor

SUNNET Technology Co., Ltd.

Product