357 matches found
PT-2022-11721
Name of the Vulnerable Software and Affected Versions Chikista Patient Management Software version 2.0.2 Description A Cross Site Scripting XSS issue exists via the last name parameter in several pages, including "patient/insert", "patient report", "/appointment report", "visit report", and "/bil...
Chikista Patient Management Software 跨站脚本漏洞
Chikista Patient Management Software is a hospital/clinic management system from Chikista India. Chikista Patient Management Software 2.0.2 has a security vulnerability in the firstname parameter of the 1 Patient/Insertion, 2 Patient Report, 3 Appointment Report, 4 Visit Report, and 5 Billing...
CVE-2021-42868: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerability exists in Chikista Patient Management Software 2.0.2 in the firstname parameter in 1 patient/insert, 2 patientreport, 3 appointmentreport, 4 visitreport, and 5 billdetailreport pages...
CVE-2021-42869: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerability exists in Chikista Patient Management Software 2.0.2 via the lastname parameter in the 1 patient/insert, 2 patientreport, 3 /appointmentreport, 4 visitreport, and 5 /billdetailreport pages...
Chikitsa Patient Management System 2.0.2 - (backup) Remote Code Execution Exploit
Exploit Title: Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution RCE Authenticated Exploit Author: 0z09e https://twitter.com/0z09e Vendor Homepage: https://sourceforge.net/u/dharashah/profile/ Software Link:...
Chikitsa Patient Management System 2.0.2 - (plugin) Remote Code Execution Exploit
Exploit Title: Chikitsa Patient Management System 2.0.2 - Remote Code Execution RCE Authenticated Exploit Author: 0z09e https://twitter.com/0z09e Vendor Homepage: https://sourceforge.net/u/dharashah/profile/ Software Link:...
Chikitsa Patient Management System 2.0.2 Backup Remote Code Execution
Exploit Title: Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution RCE Authenticated Date: 03/12/2021 Exploit Author: 0z09e https://twitter.com/0z09e Vendor Homepage: https://sourceforge.net/u/dharashah/profile/ Software Link:...
Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
Exploit Title: Chikitsa Patient Management System 2.0.2 - Remote Code Execution RCE Authenticated Date: 03/12/2021 Exploit Author: 0z09e https://twitter.com/0z09e Vendor Homepage: https://sourceforge.net/u/dharashah/profile/ Software Link:...
Chikitsa Patient Management System 2.0.2 - 'backup' Remote Code Execution (RCE) (Authenticated)
Exploit Title: Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution RCE Authenticated Date: 03/12/2021 Exploit Author: 0z09e https://twitter.com/0z09e Vendor Homepage: https://sourceforge.net/u/dharashah/profile/ Software Link:...
The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System allows an attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...
CVE-2021-38152
CVE-mitre:index.php/appointment/insertpatientaddappointment in Chikitsa Patient Management System 2.0.0 allows XSS. nu11secur1ty: XSS-Stored - Brutal PWNED on Chikitsa 2.0.0 parameter "name" + User: Unrestricted File Upload ".php"...
CVE-2021-38151
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38149
index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38152
index.php/appointment/insertpatientaddappointment in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38152
index.php/appointment/insertpatientaddappointment in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38151
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...
Cross site scripting
index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...
Cross site scripting
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...