← CVE Intelligence

CVE-2025-30060

SQL injection in ReturnUserUnitsXML.pl via the UserID parameter PUBLISHED

Description (CNA)

In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" parameter.

Affected (CNA)

Vendor / productVersions
CGM / CGM CLININETaffected 0 before 2024.MS4

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.