A critical remote code execution vulnerability in Chikitsa Patient Management System 2.0.2 allows authenticated attackers to execute arbitrary commands on the server.

The application is susceptible to an unrestricted file upload vulnerability (CWE-434) within its module management functionality. An authenticated attacker can upload a ZIP file containing a malicious PHP script, which the server subsequently processes and executes, leading to full remote code execution.

Successful exploitation grants an attacker the ability to run arbitrary system commands, potentially leading to a total compromise of the hosting server. Given the CVSS score of 8.8, this vulnerability poses a high risk to data confidentiality, integrity, and availability, particularly as it provides a platform for lateral movement within the network or the theft of sensitive patient data managed by the system.

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to the module upload functionality or disable the application until a secure version is released.

Proactive Monitoring: Monitor server logs for unexpected file creation events in the application directory, specifically looking for new .php files within the modules folder.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block file uploads containing executable PHP code or unauthorized ZIP archives to the module management endpoint.

Public Exploit Available: Yes, a functional exploit script is available on ExploitDB (EDB-ID: 50571).

The presence of a publicly available exploit script significantly lowers the barrier for attackers to compromise systems running Chikitsa Patient Management System 2.0.2. Organizations using this software must treat this as a high-priority risk and implement the suggested compensating controls immediately, as the lack of a vendor-provided patch leaves the application exposed.