CVE-2020-26629

The vulnerability results from the lack of proper validation of uploaded file types in a component based on the jQuery library. An unauthenticated attacker can upload any file — including executable files (e.g., webshell) — directly to the server without requiring any permissions. After uploading the malicious file, the attacker can gain the ability to execute commands remotely on the server by accessing the uploaded file through a web browser.

An attacker can upload a webshell or other malicious payload, gaining remote code execution (RCE) on the server, which can result in complete system compromise, theft of patient data, and further lateral movement in the network.

Apply patches available from the vendor according to the references. Additionally, it is recommended to implement strict validation of file types and extensions on the server side, require authentication before any file upload, and configure the web server so that upload directories do not have script execution permissions.

Phpgurukul Hospital Management System V4.0