An authenticated remote code execution vulnerability in Chikitsa Patient Management System 2.0.2 poses a critical risk to server integrity.

This vulnerability is an unrestricted file upload flaw (CWE-434) located within the backup restoration functionality. An authenticated attacker can upload a crafted backup archive containing a malicious PHP shell, which the server subsequently executes to achieve remote code execution.

Successful exploitation of this vulnerability allows an attacker to gain full control over the underlying server hosting the application. This could lead to complete data compromise, unauthorized access to sensitive patient records, and significant operational disruption. Given the CVSS score of 8.8, this flaw represents a high-severity risk that requires immediate attention to prevent total system compromise.

Immediate Action: Upgrade to a patched version if available, or remove the affected functionality if it is not business-critical. As the vendor has not provided a specific patch version in the provided data, contact the vendor or restrict access to the backup restoration interface to highly trusted administrative accounts only.

Proactive Monitoring: Review web server access and error logs for suspicious requests targeting the backup restoration endpoint or unexpected file creation in the uploads directory. Monitor for unusual outbound network traffic from the web server, which may indicate a successful shell deployment.

Compensating Controls: Implement a Web Application Firewall (WAF) to inspect and block file uploads containing prohibited extensions such as .php. Ensure the web server process runs with the least privilege necessary to limit the impact of potential command execution.

Public Exploit Available: Yes, a functional exploit script is available on Exploit-DB (EDB-ID: 50572).

Due to the availability of a public exploit and the severe impact of remote code execution, this vulnerability poses a significant danger to the environment. Administrators should immediately restrict access to the backup restoration feature and prioritize the application of any security updates released by the vendor. Failure to secure this endpoint significantly increases the likelihood of a successful server-side compromise.