CVE-2021-47757

High CVSS: 8.7

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server.

Vendor

Chikitsa

Product

Patient Management System

CWE

CWE-434

Yayın Tarihi

2026-01-15 16:16:06

Güncelleme

2026-01-23 18:17:28

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-434 Patient Management System HIGH Chikitsa 2026

Referanslar

https://github.com/sanskruti-technologies/chikitsa https://sourceforge.net/projects/chikitsa/ https://www.chikitsa.io/ https://www.exploit-db.com/exploits/50572