File and Path Handling

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. Sunnet eHRD - Path TraversalCVE-2021-43358Sunnet · CVSS 7.5 · 2.4% likely

   CWE-22

2. SUNNET CTMS - Path TraversalCVE-2023-24836SUNNET · CVSS 8.8 · 1.2% likely

   CWE-22

3. SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeCVE-2024-11984SUNNET Technology Co., Ltd. · CVSS 8.8 · 0.8% likely

   CWE-434

4. SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeCVE-2025-54944SUNNET Technology Co., Ltd. · CVSS 6.9 · 0.7% likely

   CWE-434

5. SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeCVE-2026-24727SUNNET Technology Co., Ltd. · CVSS 9.3 · 0.7% likely

   CWE-434

6. Sunnet｜WMPro - Arbitrary File UploadCVE-2025-15226Sunnet · CVSS 9.8 · 0.6% likely

   CWE-434

7. SUNNET Corporate Training Management System - External Control of File Name or PathCVE-2025-54945SUNNET Technology Co., Ltd. · CVSS 10 · 0.5% likely

   CWE-73

8. Sunnet｜WMPro - Arbitrary File ReadCVE-2025-15225Sunnet · CVSS 7.5 · 0.5% likely

   CWE-23

9. Sunnet｜eHRD CTMS - Arbitrary File Reading through Path TraversalCVE-2025-9570Sunnet · CVSS 4.9 · 0.5% likely

   CWE-23

10. Wisdom Master Pro - Improper Control of Filename for Include/Require Statement in PHP ProgramCVE-2025-31340SUNNET Technology Co., Ltd. · CVSS 9.9 · 0.5% likely

    CWE-98

11. Wisdom Master Pro - Unrestricted Upload of File with Dangerous TypeCVE-2025-31339SUNNET Technology Co., Ltd. · CVSS 5.3 · 0.5% likely

    CWE-434

12. Sunnet｜CTMS and CPAS - Arbitrary File UploadCVE-2026-7490Sunnet · CVSS 7.2 · 0.5% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.