CGM CLININET Code Injection Vulnerability
Vulnerability
A code injection vulnerability exists in CGM CLININET within the endpoints '/cgi-bin/CliniNET.prd/utils/usrlogstat_simple.pl', '/cgi-bin/CliniNET.prd/utils/usrlogstat.pl', '/cgi-bin/CliniNET.prd/utils/userlogstat2.pl', and '/cgi-bin/CliniNET.prd/utils/dblogstat.pl'. The vulnerability arises because the parameters in these endpoints are not properly normalized, allowing for malicious code to be injected and potentially executed.
Impact
Exploitation of this vulnerability allows for code injection, where an attacker can introduce and execute arbitrary code on the server.
Added: Mar 2, 2026, 12:19 PM
Updated: Mar 2, 2026, 12:19 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
0.0relevance
3.7threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.