CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System hospital-management allows Upload a Web Shell to a Web Server.This issue affects Hospital Management System: from n/a through <= 47.0(20-11-2023).
Explanation of Vulnerability in Simple Terms
The Hospital Management System Joomla extension allows unauthenticated attackers to upload arbitrary files to the server without restriction. An attacker can upload malicious PHP files or other executable code, gaining the ability to run their own code on the site and take complete control. All versions up to 47.0 (released November 20, 2023) are affected. No patched version is currently available.
What an attacker can do
Upload and execute arbitrary files, including PHP code, to run their own code on the site.
Potential impact on your site
Complete compromise of the site and server; attacker can read, modify, or delete all data and install backdoors.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
