Skip to content
OpenAdvisories

Vendor

dharashah

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8

    Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)

    Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality. Authenticated attackers can generate and upload a ZIP plugin …

  • High 8.8

    Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)

    Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary syste…