CVE-2020-10509: Improper Neutralization of Input During Web Page Generation

Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting XSS, attackers can inject arbitrary command into the system and launch XSS attack...

Sunnet eHRD Improper Access Control Vulnerability

Sunnet eHRD is a talent training and development management system. An improper access control vulnerability exists in Sunnet eHRD. An authenticated attacker could exploit the vulnerability to access unauthorized functionality and data via a specific URL...

PT-2020-12180

Name of the Vulnerable Software and Affected Versions Sunnet eHRD affected versions not specified Description The issue is related to Broken Access Control in Sunnet eHRD, a human training and development management system. After logging in, attackers can use a specific URL to access unauthorized...

PT-2020-12179

Name of the Vulnerable Software and Affected Versions Sunnet eHRD affected versions not specified Description The issue concerns a Cross-Site Scripting XSS vulnerability, which allows attackers to inject arbitrary commands into the system and launch an XSS attack. This can potentially lead to...

CVE-2020-10510: Incorrect Authorization

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...

CVE-2020-10508: Undefined Security Weakness

Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information...