Vulnerabilities

TI-2021-22375 CVE-2021-47758 · GHSA-wqg6-793x-j3cp

Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)

HIGH 73

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00975 Published 2026-01-15 No fix listed CWE-434

TI-2021-22374 CVE-2021-47757 · GHSA-8f5x-4gfr-8fxp

Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)

HIGH 73

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00884 Published 2026-01-15 No fix listed CWE-434

TI-2021-15832 CVE-2021-38152 · GHSA-mwc9-pj88-mr4v

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

LOW 26

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01016 Published 2021-08-06 No fix listed CWE-79

TI-2021-15831 CVE-2021-38151 · GHSA-jx3v-8cwq-743v

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

LOW 25

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00618 Published 2021-08-06 No fix listed CWE-79

TI-2021-15829 CVE-2021-38149 · GHSA-pq6g-v7vx-m549

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.

LOW 26

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00664 Published 2021-08-06 No fix listed CWE-79

Vulnerabilities

Filters

Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)

Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.