CVE-2024-11984: Sunnet Technology Co., Ltd Corporate Training Management System

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM privilege via a crafted ZIP file.

Affected products

• Sunnet Technology Co., Ltd Corporate Training Management System: before 10.13 (fixed in 10.13)

Published 2024-12-19. Last modified 2026-06-17.