CVE-2021-47758
HIGHChikitsa Patient Management System 2.0.2 - Authenticated Remote Code Execution via Malicious Plugin Upload
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47758. PoCs published by 0z09e.
AI-analyzed exploit summary This exploit demonstrates an authenticated RCE vulnerability in Chikitsa Patient Management System 2.0.2 by uploading a malicious plugin via the module upload functionality. The plugin contains a PHP backdoor that allows command execution via HTTP requests.
Description
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality. Authenticated attackers can generate and upload a ZIP plugin with a PHP backdoor that enables arbitrary command execution on the server through a weaponized PHP script.
Exploits (1)
This exploit demonstrates an authenticated RCE vulnerability in Chikitsa Patient Management System 2.0.2 by uploading a malicious plugin via the module upload functionality. The plugin contains a PHP backdoor that allows command execution via HTTP requests.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H