Vulnerabilities

TI-2025-08965 CVE-2025-9775 · GHSA-f477-qqvc-g68m

RemoteClinic edit-my-profile.php unrestricted upload

HIGH 70

A vulnerability was found in RemoteClinic up to 2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00553 Published 2025-09-01 No fix listed CWE-284

TI-2025-08964 CVE-2025-9774 · GHSA-hg2q-xf99-3974

RemoteClinic edit-patient.php information disclosure

MEDIUM 63

A vulnerability has been found in RemoteClinic up to 2.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00404 Published 2025-09-01 No fix listed CWE-200

TI-2025-08963 CVE-2025-9773

RemoteClinic edit.php cross site scripting

MEDIUM 63

A flaw has been found in RemoteClinic up to 2.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00411 Published 2025-09-01 No fix listed CWE-79

TI-2025-08962 CVE-2025-9772 · GHSA-wvf3-f2vp-h5cp

RemoteClinic edit.php unrestricted upload

HIGH 70

A vulnerability was detected in RemoteClinic up to 2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00553 Published 2025-09-01 No fix listed CWE-284

TI-2023-16547 CVE-2023-33481 · GHSA-55jv-g63w-9jph

RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start'…

MEDIUM 50

RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2023-11-07 No fix listed CWE-89

TI-2023-16546 CVE-2023-33480 · GHSA-ghwh-356h-wcgq

RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a…

MEDIUM 44

RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the targe…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0193 Published 2023-11-07 No fix listed CWE-434

TI-2023-16545 CVE-2023-33479 · GHSA-4fcv-689w-5fjw

RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file.

HIGH 82

RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2023-11-07 No fix listed CWE-89

TI-2023-16544 CVE-2023-33478 · GHSA-8pj8-c4m2-fgh7

RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php.

HIGH 82

RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2023-11-07 No fix listed CWE-89

TI-2022-23828 CVE-2022-48152 · GHSA-j2j6-58j9-ppgm

SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary…

HIGH 82

SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.008 Published 2023-01-20 No fix listed CWE-89

TI-2021-16757 CVE-2021-39416 · GHSA-62g8-f48c-frqp

Multiple Cross Site Scripting (XSS) vulnerabilities exists in Remote Clinic v2.0 in (1)…

LOW 30

Multiple Cross Site Scripting (XSS) vulnerabilities exists in Remote Clinic v2.0 in (1) patients/register-patient.php via the (a) Contact, (b) Email, (c) Weight, (d) Profession, (e) ref_contact, (f) address, (g) gender,…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0113 Published 2021-11-05 No fix listed CWE-79

TI-2021-11478 CVE-2021-31327 · GHSA-qh3c-rgpw-mvw7

Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field.

LOW 28

Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01663 Published 2021-04-21 No fix listed CWE-79

TI-2021-11479 CVE-2021-31329 · GHSA-hqrc-6f8c-gq6q

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php

LOW 28

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01663 Published 2021-04-21 No fix listed CWE-79

TI-2021-10629 CVE-2021-30030 · GHSA-8c2g-38fr-jxwv