CVEs we hold for Sunnet

Records whose assigning authority named Sunnet as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-7490Sunnet｜CTMS and CPAS - Arbitrary File UploadSunnet CPAS

CVE-2026-7489Sunnet｜CTMS - SQL InjectionSunnet CTMS

CVE-2026-24727SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co., Ltd. Corporate Training Management…

CVE-2025-9570Sunnet｜eHRD CTMS - Arbitrary File Reading through Path TraversalSunnet eHRD CTMS

CVE-2025-9569Sunnet｜eHRD CTMS - Reflected Cross-site ScriptingSunnet eHRD CTMS

CVE-2025-9568Sunnet｜eHRD CTMS - Reflected Cross-site ScriptingSunnet eHRD CTMS

CVE-2025-9567Sunnet｜eHRD CTMS - Reflected Cross-site ScriptingSunnet eHRD CTMS

CVE-2025-54946SUNNET Corporate Training Management System - SQL InjectionSUNNET Technology Co., Ltd. Corporate Training Management…

CVE-2025-54945SUNNET Corporate Training Management System - External Control of File Name or PathSUNNET Technology Co., Ltd. Corporate Training Management…

CVE-2025-54944SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co., Ltd. Corporate Training Management…

CVE-2025-54943SUNNET Corporate Training Management System - Missing AuthorizationSUNNET Technology Co., Ltd. Corporate Training Management…

CVE-2025-54942SUNNET Corporate Training Management System - Missing Authentication for Critical FunctionSUNNET Technology Co., Ltd. Corporate Training Management…

CVE-2025-3707Sunnet eHRD CTMS - SQL InjectionSunnet eHRD CTMS

CVE-2025-31340Wisdom Master Pro - Improper Control of Filename for Include/Require Statement in PHP ProgramSUNNET Technology Co., Ltd. Wisdom Master Pro

CVE-2025-31339Wisdom Master Pro - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co., Ltd. Wisdom Master Pro

CVE-2025-31338Wisdom Master Pro - Missing AuthorizationSUNNET Technology Co., Ltd. Wisdom Master Pro

CVE-2025-15226Sunnet｜WMPro - Arbitrary File UploadSunnet WMPro

CVE-2025-15225Sunnet｜WMPro - Arbitrary File ReadSunnet WMPro

CVE-2024-11984SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co., Ltd. Corporate Training Management…

CVE-2024-10440Sunnet eHRD CTMS - SQL InjectionSunnet eHRD CTMS

CVE-2024-10439Sunnet eHRD CTMS - Insecure Direct Object ReferenceSunnet eHRD CTMS

CVE-2024-10438Sunnet eHRD CTMS - Authentication BypassSunnet eHRD CTMS

CVE-2023-35851SUNNET WMPro - SQL InjectionSUNNET WMPro

CVE-2023-35850SUNNET WMPro - Command InjectionSUNNET WMPro

CVE-2023-24836SUNNET CTMS - Path TraversalSUNNET CTMS

CVE-2021-43360Sunnet eHRD - Insecure DeserializationSunnet eHRD

CVE-2021-43359Sunnet eHRD - Broken Access ControlSunnet eHRD

CVE-2021-43358Sunnet eHRD - Path TraversalSunnet eHRD

CVE-2020-10510Sunnet eHRD - Broken Access ControlSunnet eHRD

CVE-2020-10509Sunnet eHRD - Cross-Site ScriptingSunnet eHRD

CVE-2020-10508Sunnet eHRD - Sensitive Data ExposureSunnet eHRD

CVE-2019-11062SUNNET WMPro v5.0 and v5.1 has OS Command InjectionSUNNET WMPro

32 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.