CVE-2025-54945

Critical CVSS: 10.0

An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.

Vendor

Sun.net

Product

Ehrd Ctms

CWE

CWE-73

Yayın Tarihi

2025-08-30 04:15:57

Güncelleme

2026-01-30 04:15:49

Source Identifier

ART@zuso.ai

KEV Date Added

Kategoriler

CWE-73 Ehrd Ctms CRITICAL Sun.net 2025

Referanslar

https://zuso.ai/advisory/za-2025-13

Benzer Kayıtlar

High

CVE-2025-15225

WMPro developed by Sunnet has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit…

Critical

CVE-2025-15226

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload…

Medium

CVE-2025-9570

The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administra…

Medium

CVE-2025-9567

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attacke…

Medium

CVE-2025-9568

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attacke…

Medium

CVE-2025-9569

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attacke…