CVE-2021-47757
HIGHChikitsa Patient Management System 2.0.2 - Authenticated Remote Code Execution via Backup Restoration
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47757. PoCs published by 0z09e.
AI-analyzed exploit summary This exploit leverages an authenticated backup/restore mechanism in Chikitsa Patient Management System 2.0.2 to inject a PHP backdoor. It logs in, downloads a backup, modifies it to include a malicious PHP file, and uploads it back to achieve remote code execution.
Description
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server.
Exploits (1)
This exploit leverages an authenticated backup/restore mechanism in Chikitsa Patient Management System 2.0.2 to inject a PHP backdoor. It logs in, downloads a backup, modifies it to include a malicious PHP file, and uploads it back to achieve remote code execution.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H