CVE-2021-47758
Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.7EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
15 ene 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality. Authenticated attackers can generate and upload a ZIP plugin with a PHP backdoor that enables arbitrary command execution on the server through a weaponized PHP script.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
dharashah · Chikitsa Patient Management System¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →