We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2021-47758

CVE-2021-47758

PHP

Severity: HIGH
CVSS: 8.8CVSS
Published: 2026-01-15
Last modified: 2026-02-03
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-434

Description

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality. Authenticated attackers can generate and upload a ZIP plugin with a PHP backdoor that enables arbitrary command execution on the server through a weaponized PHP script.

References

https://github.com/sanskruti-technologies/chikitsa
https://sourceforge.net/projects/chikitsa/
https://www.chikitsa.io/
https://www.exploit-db.com/exploits/50571

Summary

Description

References