SQL Injection in Cgm Clininet
CVE-2025-30060
In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" parameter.
Vulnerability class: SQL Injection
EPSS: 0.000 (11.3th percentile) — read the EPSS interpretation.
Affected products
- Cgm Clininet — versions 0