CVE-2026-7489

脆弱性の種類

CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

影響を受ける製品

• sun.net ehrd_ctms

参考情報

• https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html
• https://www.twcert.org.tw/tw/cp-132-10894-1ac1f-1.html