← Database

CVE-2022-40471

CRITICAL CVSS: 9.8 Published: 2022-10-31 Modified: 2026-06-17

Description

Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php

Affected Platforms

Oretnom23 Clinic\'S Patient Management System

Weakness Type

CWE-434, CWE-434

References