CVE-2023-33480
HIGH EPSS 77.5%
Published Nov 7, 20232y ago · Modified Jun 17, 20262w ago
8.8 CVSS 3.1
Published Nov 7, 2023 2y ago
Last Modified Jun 17, 2026 2w ago
Description
RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabilities are caused by a lack of input validation and access control in the staff/register.php endpoint and the edit-my-profile.php page. By sending a series of specially crafted requests to the RemoteClinic application, an attacker can create admin users with more privileges than their own, upload a PHP file containing arbitrary code, and execute arbitrary commands via the PHP shell.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
77.5% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-434 Unrestricted Upload of File with Dangerous Type Resource Mgmt
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| remoteclinic | remote_clinic | 2.0 | any |
References 1
- github.com https://github.com/remoteclinic/RemoteClinic/issues/24
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.