CVE-2021-47758: high-severity vulnerability in dharashah Chikitsa Patient Management System
Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.0%
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality. Authenticated attackers can generate and upload a ZIP plugin with a PHP backdoor that enables arbitrary command execution on the server through a weaponized PHP script.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
dharashah · Chikitsa Patient Management SystemRelated CVEs — dharashah Chikitsa Patient Management System
In the same product, most dangerous first.