CVE-2025-54944 — SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type

CVE-2025-54944

SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type PUBLISHED

Description (CNA)

An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a specific file, which may lead to arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
SUNNET Technology Co., Ltd. / Corporate Training Management System	affected 0 before 10.11

CWE

CWE-434

References

https://zuso.ai/advisory/za-2025-12

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.