SQL Injection in Cgm Clininet
CVE-2025-30062
In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection.
Vulnerability class: SQL Injection
EPSS: 0.002 (8.9th percentile) — read the EPSS interpretation.
Affected products
- Cgm Clininet — versions 0
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)
- cvd@cert.pl (product)