Description
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| dharashah | Chikitsa Patient Management System | 2.0.2 | — |
References
- ExploitDB-50572 exploit
- Product Webpage product
- Product GitHub Repository product
- Product Sourceforge Page product