PT-2026-3033 · Unknown · Chikitsa Patient Management System

0Z09E · Publicado 2026-01-15 · Atualizado 2026-01-20 · CVE-2021-47757

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Chikitsa Patient Management System version 2.0.2

Description The software contains an authenticated remote code execution issue in the backup restoration functionality. An authenticated attacker can upload a modified backup zip file containing a malicious PHP shell, allowing for the execution of arbitrary system commands on the server.

Recommendations Apply updates to address the issue in the backup restoration functionality.

Exploit

Correção

RCE

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2021-47757

Produtos afetados

Chikitsa Patient Management System

Referências · 9

• 🔥 https://exploit-db.com/exploits/50572 · Exploit
• https://github.com/sanskruti-technologies/chikitsa · Nota
• https://chikitsa.io · Nota
• https://sourceforge.net/projects/chikitsa · Nota
• https://twitter.com/CVEnew/status/2011926111039734107 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2011840888591257754 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2021-47757 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-47757 · Nota de Segurança
• https://twitter.com/cracbot/status/2013567241846169899 · Publicação no Twitter