SUNNET Corporate Training Management System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in SUNNET Corporate Training Management System versions prior to 10.11. This vulnerability allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or manipulation.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to execute arbitrary SQL commands. This could lead to unauthorized data access, data manipulation, or in some cases, executing commands on the underlying server.