CVE-2025-54945 — SUNNET Corporate Training Management System - External Control of File Name or Path

CVE-2025-54945

SUNNET Corporate Training Management System - External Control of File Name or Path PUBLISHED

Description (CNA)

An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.

Affected (CNA)

Vendor / product	Versions
SUNNET Technology Co., Ltd. / Corporate Training Management System	affected 0 before 10.11

CWE

CWE-73

References

https://zuso.ai/advisory/za-2025-13

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.