Clinic Management System version 1.0 suffers from an unauthenticated remote code execution vulnerability.