critical9.8
CVE-2025-54946
A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.
Impact
A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun.Net | Ehrd Ctms | before 10.11 |