Description
In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CGM | CGM CLININET | < 2024.MS4 | 2024.MS4 |
Medium · 6.9
CVE-2025-30061
EUVD-2025-25892GHSA-6wwx-42rp-7234
SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter
Published Aug 27, 2025 · Updated Aug 27, 2025 · Assigned by CERT-PL