RemoteClinic vulnerabilities
We track 4 vulnerabilities in RemoteClinic products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 1, 2025.
Latest RemoteClinic vulnerabilities
- 9.8 Critical severity
RemoteClinic: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in RemoteClinic up to 2.0. Impacted is an unknown function of the file /staff/edit-my-profile.php. The manipulation of the argument image results in unrestricted upload. The attack may be launched remotely. The exploit has been made p
- 9.8 Critical severity
RemoteClinic: Unrestricted Upload of File with Dangerous Type
A vulnerability was detected in RemoteClinic up to 2.0. This affects an unknown part of the file /staff/edit.php. Performing manipulation of the argument image results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and
- 8.8 High severity
remote_clinic: Unrestricted Upload of File with Dangerous Type
RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabil
- 9.8 Critical severity
Remote Clinic: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php.