Approved changes feed: RSS · Atom

cpe:2.3:a:chikitsa:patient_management_system:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

VendorChikitsa (b61b9b63-d7dd-58a8-8955-9e9e8ece34a0)
ProductPatient Management System (f2379259-2c6e-5d69-a1ab-f5abe51ac088)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47758 vulnerable 2026-06-08 05:38:07.583230 Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)
HIGH (8.8)
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality. Authenticated attackers can generate and upload a ZIP plugin with a PHP backdoor that enables arbitrary command execution on the server through a weaponized PHP script.
Published: 2026-01-15T15:52:05.437Z
Updated: 2026-03-05T01:28:30.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47757 vulnerable 2026-06-08 05:38:07.582711 Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
HIGH (8.8)
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server.
Published: 2026-01-15T15:52:04.994Z
Updated: 2026-03-05T01:28:29.743Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.