chikitsa records

7 published records for vendor chikitsa.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2021-47758No exploit	Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)chikitsa · patient management system · CWE-434 RCE File upload	High8.7	—	1.0%	Jan 15, 2026
34Monitor	CVE-2021-47757No exploit	Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)chikitsa · patient management system · CWE-434 RCE File upload	High8.7	—	0.9%	Jan 15, 2026
21Monitor	CVE-2021-38152No exploit	index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.chikitsa · patient management system · CWE-79 XSS	Medium5.4	—	1.0%	Aug 6, 2021
21Monitor	CVE-2021-38149Proof of concept	index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.chikitsa · patient management system · CWE-79 XSS	Medium5.4	—	0.7%	Aug 6, 2021
21Monitor	CVE-2021-38151No exploit	index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.chikitsa · patient management system · CWE-79 XSS	Medium5.4	—	0.6%	Aug 6, 2021
19Monitor	CVE-2021-42869No exploit	A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 via the last_name parameter in the (1) patiechikitsa · patient management software · CWE-79 XSS	Medium4.8	—	0.6%	Mar 31, 2022
19Monitor	CVE-2021-42868No exploit	A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parameter in (1) patient/ichikitsa · patient management software · CWE-79 XSS	Medium4.8	—	0.5%	Mar 31, 2022

CVE-2021-47758
34Monitor
Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)
HighCVSS 8.7No exploitEPSS 1%
- RCE
- File upload
chikitsa · patient management systemJan 15, 2026
CVE-2021-47757
34Monitor
Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
HighCVSS 8.7No exploitEPSS 1%
- RCE
- File upload
chikitsa · patient management systemJan 15, 2026
CVE-2021-38152
21Monitor
index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.
MediumCVSS 5.4No exploitEPSS 1%
- XSS
chikitsa · patient management systemAug 6, 2021
CVE-2021-38149
21Monitor
index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.
MediumCVSS 5.4Proof of conceptEPSS 1%
- XSS
chikitsa · patient management systemAug 6, 2021
CVE-2021-38151
21Monitor
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.
MediumCVSS 5.4No exploitEPSS 1%
- XSS
chikitsa · patient management systemAug 6, 2021
CVE-2021-42869
19Monitor
A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 via the last_name parameter in the (1) patie
MediumCVSS 4.8No exploitEPSS 1%
- XSS
chikitsa · patient management softwareMar 31, 2022
CVE-2021-42868
19Monitor
A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parameter in (1) patient/i
MediumCVSS 4.8No exploitEPSS 1%
- XSS
chikitsa · patient management softwareMar 31, 2022