CVE-2023-33480: Unrestricted Upload of File with Dangerous Type

RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabilities are caused by a lack of input...

CVE-2021-31329

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

CVE-2021-31329

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

CVE-2021-31329: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

Cross site scripting

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

CVE-2021-30044: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...