CVE-2021-38149

CVE-2021-38149 affects Chikitsa Patient Management System 2.0.0. The vulnerability is a cross-site scripting (XSS) flaw exploitable via index.php/admin/add_user, allowing injection of scripts through user-supplied input. The connected sources confirm the targeted path and the XSS impact, with no ...

CVE-2021-38151

CVE-2021-38151 affects Chikitsa Patient Management System 2.0.0. The connected documents confirm a cross-site scripting (XSS) vulnerability at the URL path index.php/appointment/todos, originating from insufficient input handling in that component. The CVE entry details an XSS issue for this exac...

CVE-2021-38152

CVE-2021-38152 affects Chikitsa Patient Management System 2.0.0. The vulnerability is an XSS flaw in index.php/appointment/insert_patient_add_appointment, due to insufficient input sanitization. CVSS metrics recorded: CVSS v2 base score 3.5 (LOW) and CVSS v3.1 base score 5.4 (MEDIUM). Impact is l...

CVE-2021-47757

CVE-2021-47757 affects Chikitsa Patient Management System 2.0.2. An authenticated remote code execution vulnerability exists in the backup restoration functionality: an authenticated attacker can upload a modified backup ZIP containing a malicious PHP shell to execute arbitrary system commands on...

CVE-2021-47758

Chikitsa Patient Management System 2.0.2 is affected by an authenticated remote code execution (RCE) vulnerability exposed via the module upload function. An authenticated attacker can upload a ZIP plugin containing a PHP backdoor, enabling arbitrary command execution on the server through a weap...