CVE-2023-33480

RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabilities are caused by a lack of input...

CVE-2023-33480: Unrestricted Upload of File with Dangerous Type

RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabilities are caused by a lack of input...

CVE-2021-31329

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

CVE-2021-31329

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

CVE-2021-31329: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

PT-2021-19244

Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue concerns a Cross Site Scripting XSS problem. It affects the "Chat" and "Personal Address" fields on the staff/register.php page. Recommendations For Remote Clinic version 2.0, consider restrictin...

Cross site scripting

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

CVE-2021-30044

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

CVE-2021-30044: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

PT-2021-18582

Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue is related to Cross Site Scripting XSS that can be exploited via the First Name or Last Name field on the "staff/register.php" API endpoint. This allows for potential malicious script injection...