VULNERABILITY INTELLIGENCE

CVE-2021-47757

CVSS score8.8 HIGH

EPSS probability0.88%

CISA KEVNot currently listed

Published2026-01-15

Last modified2026-06-17

Description

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server.