CVE-2022-36270

Impact

Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.

Affected products

References

• NVD record
• CVE.org record
• https://github.com/FF9118/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/RCE-1.md
• https://github.com/FF9118/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/RCE-1.md