Unrated severityNVD Advisory· Published Jan 15, 2026· Updated Mar 5, 2026
Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
CVE-2021-47757
Description
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server.
Affected products
2- Range: =2.0.2
- dharashah/Chikitsa Patient Management Systemv5Range: 2.0.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/50572mitreexploit
- sourceforge.net/projects/chikitsa/mitreproduct
- www.chikitsa.iomitreproduct
News mentions
0No linked articles in our index yet.