CVE-2025-30050

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an...

CVE-2025-30050

The CGM CLININET software is vulnerable to Code Injection in the RunCGI.pm component. The root cause is that the component dynamically imports modules based on a user-supplied query parameter, allowing an attacker from an adjacent network to execute arbitrary code with root privileges by providin...

EUVD-2025-211180

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an...