CVE-2021-47757

High · 8.8

CVSS

8.8

EPSS

0.9%

Published

Jan 15, 2026

CISA due date

—

The record

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server.

Affected packages

Ecosystem	Package	Introduced	Fixed