CVE-2025-10350
Lifecycle Timeline
2Tags
Description
SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9.0.
Analysis
including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions up to 7.9.0. is affected by sql injection.
Technical Context
This vulnerability (CWE-89: SQL Injection) affects including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in. SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9.0.
Affected Products
Product: including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in. Versions: up to 7.9.0..
Remediation
Monitor vendor advisories for a patch. Use parameterized queries. Implement input validation.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today