remoteclinic records
17 published records for vendor remoteclinic.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-284 Improper Access Control2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
17 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2022-48152No exploit | SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parremoteclinic · remote clinic · CWE-89 | Critical9.8 | — | 0.8% | Jan 20, 2023 |
39Monitor | CVE-2023-33478No exploit | RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php.remoteclinic · remote clinic · CWE-89 | Critical9.8 | — | 0.7% | Nov 7, 2023 |
39Monitor | CVE-2023-33479No exploit | RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file.remoteclinic · remote clinic · CWE-89 | Critical9.8 | — | 0.7% | Nov 7, 2023 |
39Monitor | CVE-2023-33481No exploit | RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php.remoteclinic · remote clinic · CWE-89 | Critical9.8 | — | 0.7% | Nov 7, 2023 |
36Monitor | CVE-2023-33480No exploit | RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to remoteclinic · remote clinic · CWE-434 | High8.8 | — | 1.9% | Nov 7, 2023 |
24Monitor | CVE-2021-39416No exploit | Multiple Cross Site Scripting (XSS) vulnerabilities exists in Remote Clinic v2.0 in (1) patients/register-patient.php via the (a) Contact, (remoteclinic · remote clinic · CWE-79 | Medium6.1 | — | 1.1% | Nov 5, 2021 |
22Monitor | CVE-2021-30030Proof of concept | Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php.remoteclinic · remote clinic · CWE-79 | Medium5.4 | — | 1.7% | Apr 12, 2021 |
22Monitor | CVE-2021-30034Proof of concept | Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php.remoteclinic · remote clinic · CWE-79 | Medium5.4 | — | 1.7% | Apr 12, 2021 |
22Monitor | CVE-2021-30039Proof of concept | Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php.remoteclinic · remote clinic · CWE-79 | Medium5.4 | — | 1.7% | Apr 12, 2021 |
22Monitor | CVE-2021-30042Proof of concept | Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinicremoteclinic · remote clinic · CWE-79 | Medium5.4 | — | 1.7% | Apr 12, 2021 |
22Monitor | CVE-2021-30044Proof of concept | Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.remoteclinic · remote clinic · CWE-79 | Medium5.4 | — | 1.7% | Apr 12, 2021 |
22Monitor | CVE-2025-9772No exploit | RemoteClinic edit.php unrestricted uploadremoteclinic · remote clinic · CWE-284 | Medium5.5 | — | 0.5% | Sep 1, 2025 |
22Monitor | CVE-2025-9775No exploit | RemoteClinic edit-my-profile.php unrestricted uploadremoteclinic · remote clinic · CWE-284 | Medium5.5 | — | 0.5% | Sep 1, 2025 |
21Monitor | CVE-2021-31329Proof of concept | Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.phpremoteclinic · remote clinic · CWE-79 | Medium5.4 | — | 1.6% | Apr 21, 2021 |
21Monitor | CVE-2021-31327Proof of concept | Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field.remoteclinic · remote clinic · CWE-79 | Medium5.4 | — | 1.6% | Apr 21, 2021 |
8Monitor | CVE-2025-9773No exploit | RemoteClinic edit.php cross site scriptingremoteclinic · remote clinic · CWE-79 | Low2.1 | — | 0.3% | Sep 1, 2025 |
8Monitor | CVE-2025-9774No exploit | RemoteClinic edit-patient.php information disclosureremoteclinic · remote clinic · CWE-200 | Low2.1 | — | 0.3% | Sep 1, 2025 |
- CVE-2022-4815239Monitor
SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id par
CriticalCVSS 9.8No exploitEPSS 0%remoteclinic · remote clinicJan 20, 2023
- CVE-2023-3347839Monitor
RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php.
CriticalCVSS 9.8No exploitEPSS 0%remoteclinic · remote clinicNov 7, 2023
- CVE-2023-3347939Monitor
RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file.
CriticalCVSS 9.8No exploitEPSS 0%remoteclinic · remote clinicNov 7, 2023
- CVE-2023-3348139Monitor
RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php.
CriticalCVSS 9.8No exploitEPSS 0%remoteclinic · remote clinicNov 7, 2023
- CVE-2023-3348036Monitor
RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to
HighCVSS 8.8No exploitEPSS 1%remoteclinic · remote clinicNov 7, 2023
- CVE-2021-3941624Monitor
Multiple Cross Site Scripting (XSS) vulnerabilities exists in Remote Clinic v2.0 in (1) patients/register-patient.php via the (a) Contact, (
MediumCVSS 6.1No exploitEPSS 1%remoteclinic · remote clinicNov 5, 2021
- CVE-2021-3003022Monitor
Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php.
MediumCVSS 5.4Proof of conceptEPSS 1%remoteclinic · remote clinicApr 12, 2021
- CVE-2021-3003422Monitor
Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php.
MediumCVSS 5.4Proof of conceptEPSS 1%remoteclinic · remote clinicApr 12, 2021
- CVE-2021-3003922Monitor
Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php.
MediumCVSS 5.4Proof of conceptEPSS 1%remoteclinic · remote clinicApr 12, 2021
- CVE-2021-3004222Monitor
Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinic
MediumCVSS 5.4Proof of conceptEPSS 1%remoteclinic · remote clinicApr 12, 2021
- CVE-2021-3004422Monitor
Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.
MediumCVSS 5.4Proof of conceptEPSS 1%remoteclinic · remote clinicApr 12, 2021
- CVE-2025-977222Monitor
RemoteClinic edit.php unrestricted upload
MediumCVSS 5.5No exploitEPSS 0%remoteclinic · remote clinicSep 1, 2025
- CVE-2025-977522Monitor
RemoteClinic edit-my-profile.php unrestricted upload
MediumCVSS 5.5No exploitEPSS 0%remoteclinic · remote clinicSep 1, 2025
- CVE-2021-3132921Monitor
Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php
MediumCVSS 5.4Proof of conceptEPSS 1%remoteclinic · remote clinicApr 21, 2021
- CVE-2021-3132721Monitor
Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field.
MediumCVSS 5.4Proof of conceptEPSS 1%remoteclinic · remote clinicApr 21, 2021
- CVE-2025-97738Monitor
RemoteClinic edit.php cross site scripting
LowCVSS 2.1No exploitEPSS 0%remoteclinic · remote clinicSep 1, 2025
- CVE-2025-97748Monitor
RemoteClinic edit-patient.php information disclosure
LowCVSS 2.1No exploitEPSS 0%remoteclinic · remote clinicSep 1, 2025