PT-2022-25396 · Unknown · Clinic'S Patient Management System

Ihexcoder + 1 · Published 2022-10-31 · Updated 2025-12-31 · CVE-2022-40471

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Clinic's Patient Management System version 1.0

Description The issue allows an attacker to upload an arbitrary PHP webshell via the profile picture upload functionality in users.php. This enables remote code execution.

Recommendations For Clinic's Patient Management System version 1.0, consider disabling the profile picture upload functionality in users.php until a patch is available to prevent the upload of arbitrary PHP webshells. Restrict access to the users.php file to minimize the risk of exploitation. Avoid using the profile picture upload feature until the issue is resolved.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-40471

Affected Products

Clinic'S Patient Management System

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinic_pms_fileupload_rce.rb · Exploit
• 🔥 https://github.com/RashidKhanPathan/CVE-2022-40471 · Exploit
• 🔥 https://drive.google.com/file/d/1m-wTfOL5gY3huaSEM3YPSf98qIrkl-TW/view?usp=sharing · Exploit
• https://osv.dev/vulnerability/CVE-2022-40471 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40471 · Security Note
• https://t.me/cibsecurity/52308 · Telegram Post
• https://sourcecodester.com/php-clinics-patient-management-system-source-code · Note
• https://twitter.com/rapidriskradar/status/2006394354819273084 · Twitter Post
• https://t.me/cvenotify/121028 · Telegram Post