Exploitation Summary
EIP tracks 4 public exploits for CVE-2022-40471.
PoCs published by RashidKhanPathan, Dharan10, msutovsky-r7, Ashish Kumar, including Metasploit module exploits/multi/http/clinic_pms_sqli_to_rce.
AI-analyzed exploit summary This exploit PoC demonstrates a remote code execution vulnerability in Clinic's Patient Management System v1.0 via an unrestricted file upload flaw in the profile picture functionality. It uploads a PHP webshell to achieve command execution.
Description
Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php
Exploits (4)
This exploit PoC demonstrates a remote code execution vulnerability in Clinic's Patient Management System v1.0 via an unrestricted file upload flaw in the profile picture functionality. It uploads a PHP webshell to achieve command execution.
This PoC demonstrates an authenticated file upload vulnerability in Clinic's Patient Management System (CPMS), allowing an attacker to upload a PHP web shell and execute arbitrary commands. The exploit authenticates using provided credentials and uploads a malicious PHP file via the profile image upload feature.
This Metasploit module exploits an SQL injection vulnerability in Clinic's Patient Management System 1.0 to achieve unauthenticated remote code execution (RCE) by uploading a malicious PHP file through user modification.
This Metasploit module exploits an unauthenticated file upload vulnerability in Clinic's Patient Management System 1.0, allowing an attacker to upload a PHP web shell and execute it via directory listing in `/pms/user_images`.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H