CVE-2021-47757 — Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can uploa…
Published: 2026-01-15 · CVSS: 8.7 · CVSS 4.0
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7