CVE-2022-40471

2022-10-3100:00:00

mitre

www.cve.org

remote code execution

clinic's patient management system

profile picture upload

php webshell

cve-2022-40471

attacker

AI Score

Confidence

High

EPSS

0.041

Percentile

92.2%

JSON

Remote Code Execution in Clinic’s Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php

References

drive.google.com/file/d/1m-wTfOL5gY3huaSEM3YPSf98qIrkl-TW/view?usp=sharing

github.com/RashidKhanPathan/CVE-2022-40471

www.sourcecodester.com/php-clinics-patient-management-system-source-code