Vulnerability Details CVE-2025-54945
An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.7%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2025-54945
-
cpe:2.3:a:sun.net:ehrd_ctms:-
-
cpe:2.3:a:sun.net:ehrd_ctms:10.0
-
cpe:2.3:a:sun.net:ehrd_ctms:10.8
-
cpe:2.3:a:sun.net:ehrd_ctms:7.0_1227