Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal
Vulnerability Description
The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administrator privileges to exploit Relative Path Traversal to download arbitrary system files.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
相对路径遍历
Vulnerability Title
Sunnet eHRD CTMS 安全漏洞
Vulnerability Description
Sunnet eHRD CTMS是中国旭联（Sunnet）公司的一个人力资源发展和临床培训管理系统。 Sunnet eHRD CTMS存在安全漏洞，该漏洞源于相对路径遍历问题，可能导致任意文件读取。
CVSS Information
N/A
Vulnerability Type
N/A