Filtered by vendor Cgm Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-30057 1 Cgm 1 Clininet 2025-08-29 N/A
In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system() call in the ConvertToPDF function.
CVE-2025-30058 1 Cgm 1 Clininet 2025-08-29 N/A
In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel" parameter.