Description
In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CGM | CGM CLININET | < 2024.MS4 | 2024.MS4 |
Medium · 6.9
CVE-2025-30060
EUVD-2025-25891GHSA-rh75-3v56-4g84
SQL injection in ReturnUserUnitsXML.pl via the UserID parameter
Published Aug 27, 2025 · Updated Aug 27, 2025 · Assigned by CERT-PL