{"uuid": "cd0db46a-adab-42e3-a5cf-f478ce8a69eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2297", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinic_pms_sqli_to_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"msutovsky-r7\", \"Ashish Kumar\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an SQL injection in login portal, which allows to log in as admin. Next, it allows the attacker to upload malicious files through user modification to achieve RCE.\", \"disclosure_date\": \"2025-01-04\", \"fullname\": \"exploit/multi/http/clinic_pms_sqli_to_rce\", \"is_install_path\": true, \"mod_time\": \"2025-05-21 09:05:41 +0000\", \"name\": \"Clinic's Patient Management System 1.0 - Unauthenticated RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/clinic_pms_sqli_to_rce.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/clinic_pms_sqli_to_rce\", \"references\": [\"CVE-2022-2297\", \"CVE-2025-3096\", \"URL-https://www.cve.org/CVERecord?id=CVE-2022-40471\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Clinic Patient Management System 2.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:44.418247Z"}