← Back to browse · API

CVE-2022-40471

Severity
CRITICAL
CVSS
9.8
EPSS
0.19373
Risk score
45.98
CISA KEV
No
PoC
No
Published
2022-10-31
Modified
2025-05-06
First seen
2026-08-07
Aliases
EUVD-2022-43749, GHSA-WFH4-6HVV-X93X
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-43749

Description

Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php

References