A vulnerability classified as critical was found in SUNNET Corporate Training Management System up to 10.10. This affects an unknown function. Executing manipulation can lead to sql injection.

This vulnerability is registered as CVE-2025-54946. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.