{"vulnerability": "CVE-2021-30030", "sightings": [{"uuid": "11e1e277-ed8c-4e80-ac39-86682224c572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30030", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/242", "content": "CVE-2021-30030 CVE-2021-30034 CVE-2021-30039 CVE-2021-30042 RemoteClinic 2.0 \u5b58\u5132\u578bXSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-30030_CVE-2021-30034_CVE-2021-30039_CVE-2021-30042_RemoteClinic_2.0_%E5%AD%98%E5%84%B2%E5%9E%8BXSS%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-22T11:28:08.000000Z"}, {"uuid": "55254145-664e-45b8-87cc-96e2e56bcb2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30030", "type": "seen", "source": "https://t.me/hacking_Attack/5994", "content": "Exploit Collector\nRemoteClinic 2.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-DuI_c3FaBwQ/WWlvaHZ97uI/AAAAAAAAIO8/N3071iSnuSkvxUt6NQQ_hoJeYx39DTurQCLcBGAs/s1600/h61.png \nRemoteClinic version 2.0 suffers from multiple persistent cross site scripting vulnerabilities.\n\nMD5 | 595ad2c6469d900f430693ecfc6768cb\n\nDownload\n# Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)\n# Date: 13/04/2021\n# Exploit Author: Saud Ahmad\n# Vendor Homepage: https://remoteclinic.io/\n# Software Link: https://github.com/remoteclinic/RemoteClinic\n# Version: 2.0\n# Tested on: Windows 10\n# CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039, CVE-2021-30042\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient with Full Name Field as XSS Payload: XSS\">x \n3)After Register Patient, go to \"Patients\" endpoint.\n4)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/1\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)Here is \"Symptoms\" Field as XSS Payload: XSS\">x \n4)After Register Report, Click on home which is \"dashboard\" endpoint.\n5)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/5\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)When you scroll down page two fields there \"Fever\" and \"Blood Pressure\", both are vulnerable to XSS, inject XSS Payload in both Fields: XSS\">x \n4)After Register Report, Click on home.\n5)Now Click on Report, XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/8\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a New Clinic.\n3)Here is four fields \"Clinic Name\", \"Clinic Address\", \"Clinic City\" and \"Clinic Contact\". All are vulnerable to XSS. \n4)Inject XSS Payload in all Fields: XSS\">x \n4)Now go to Clinic Directory.\n5)Click on that Clinic.\n6)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/11\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:46.135492Z"}, {"uuid": "b799d988-618c-4b12-a764-6fc2f30a166e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30030", "type": "seen", "source": "https://t.me/hacking_Attack/5994", "content": "Exploit Collector\nRemoteClinic 2.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-DuI_c3FaBwQ/WWlvaHZ97uI/AAAAAAAAIO8/N3071iSnuSkvxUt6NQQ_hoJeYx39DTurQCLcBGAs/s1600/h61.png \nRemoteClinic version 2.0 suffers from multiple persistent cross site scripting vulnerabilities.\n\nMD5 | 595ad2c6469d900f430693ecfc6768cb\n\nDownload\n# Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)\n# Date: 13/04/2021\n# Exploit Author: Saud Ahmad\n# Vendor Homepage: https://remoteclinic.io/\n# Software Link: https://github.com/remoteclinic/RemoteClinic\n# Version: 2.0\n# Tested on: Windows 10\n# CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039, CVE-2021-30042\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient with Full Name Field as XSS Payload: XSS\">x \n3)After Register Patient, go to \"Patients\" endpoint.\n4)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/1\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)Here is \"Symptoms\" Field as XSS Payload: XSS\">x \n4)After Register Report, Click on home which is \"dashboard\" endpoint.\n5)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/5\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)When you scroll down page two fields there \"Fever\" and \"Blood Pressure\", both are vulnerable to XSS, inject XSS Payload in both Fields: XSS\">x \n4)After Register Report, Click on home.\n5)Now Click on Report, XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/8\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a New Clinic.\n3)Here is four fields \"Clinic Name\", \"Clinic Address\", \"Clinic City\" and \"Clinic Contact\". All are vulnerable to XSS. \n4)Inject XSS Payload in all Fields: XSS\">x \n4)Now go to Clinic Directory.\n5)Click on that Clinic.\n6)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/11\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:22.275613Z"}]}