Chikitsa Security Vulnerabilities

CVE-2021-42868

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parameter in (1) patient/insert, (2) patient_report, (3) appointment_report, (4) visit_report, and (5) bill_detail_report pages....

CVE-2021-42869

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 via the last_name parameter in the (1) patient/insert, (2) patient_report, (3) /appointment_report, (4) visit_report, and (5) /bill_detail_report...

CVE-2021-38149

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows...

CVE-2021-38151

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows...

CVE-2021-38152

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows...