What’s Vulnerable › Vulnerabilities

CVE-2021-47758: Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-15 · updated 2026-06-17
• Weakness: CWE-434

Description

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality. Authenticated attackers can generate and upload a ZIP plugin with a PHP backdoor that enables arbitrary command execution on the server through a weaponized PHP script.

Affected products

• dharashah Chikitsa Patient Management System: 2.0.2

References

• https://github.com/sanskruti-technologies/chikitsa
• https://sourceforge.net/projects/chikitsa/
• https://www.chikitsa.io/
• https://www.exploit-db.com/exploits/50571

Get alerted when CVE-2021-47758 or the next vulnerability affects your stack