← All advisories

Critical severity9.8NVD Advisory· Published Aug 10, 2022· Updated Jun 17, 2026

CVE-2022-36270

CVE-2022-36270

Description

Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.

Affected products

3

Oretnom23/Clinic\'s Patient Management System2 versions
cpe:2.3:a:oretnom23:clinic\'s_patient_management_system:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oretnom23:clinic\'s_patient_management_system:1.0:*:*:*:*:*:*:*
- (no CPE)range: <=1.0
Clinic's/Patient Management Systemdescription

Patches

Vulnerability mechanics

References

1

github.com/FF9118/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/RCE-1.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.