Vulnerabilities

TI-2021-22375 CVE-2021-47758 · GHSA-wqg6-793x-j3cp

Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)

HIGH 73

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00975 Published 2026-01-15 No fix listed CWE-434

TI-2021-22374 CVE-2021-47757 · GHSA-8f5x-4gfr-8fxp

Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)

HIGH 73

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00884 Published 2026-01-15 No fix listed CWE-434

TI-2021-19022 CVE-2021-42868 · GHSA-fgg4-3hhm-6qmq

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software…

LOW 23

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parameter in (1) patient/insert, (2) patient_report, (3) appointment_report, (4) visit_report, and (5) bil…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00514 Published 2022-03-31 No fix listed CWE-79

TI-2021-19023 CVE-2021-42869 · GHSA-g767-h223-fph3

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software…

LOW 23

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 via the last_name parameter in the (1) patient/insert, (2) patient_report, (3) /appointment_report, (4) visit_report, and (5…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00552 Published 2022-03-31 No fix listed CWE-79

TI-2021-15832 CVE-2021-38152 · GHSA-mwc9-pj88-mr4v

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

LOW 26

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01016 Published 2021-08-06 No fix listed CWE-79

TI-2021-15831 CVE-2021-38151 · GHSA-jx3v-8cwq-743v

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

LOW 25

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00618 Published 2021-08-06 No fix listed CWE-79

TI-2021-15829 CVE-2021-38149 · GHSA-pq6g-v7vx-m549

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.

LOW 26

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00664 Published 2021-08-06 No fix listed CWE-79

Vulnerabilities

Filters

Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)

Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software…

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software…

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.