PT-2026-3033 · Unknown · Chikitsa Patient Management System

0Z09E · Published 2026-01-15 · Updated 2026-01-20 · CVE-2021-47757

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Chikitsa Patient Management System version 2.0.2

Description The software contains an authenticated remote code execution issue in the backup restoration functionality. An authenticated attacker can upload a modified backup zip file containing a malicious PHP shell, allowing for the execution of arbitrary system commands on the server.

Recommendations Apply updates to address the issue in the backup restoration functionality.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-47757

Affected Products

Chikitsa Patient Management System

References · 9

• 🔥 https://exploit-db.com/exploits/50572 · Exploit
• https://osv.dev/vulnerability/CVE-2021-47757 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47757 · Security Note
• https://github.com/sanskruti-technologies/chikitsa · Note
• https://chikitsa.io · Note
• https://sourceforge.net/projects/chikitsa · Note
• https://twitter.com/CVEnew/status/2011926111039734107 · Twitter Post
• https://twitter.com/CveFindCom/status/2011840888591257754 · Twitter Post
• https://twitter.com/cracbot/status/2013567241846169899 · Twitter Post