CPE
An unauthenticated SQL injection vulnerability in the Administrative Mutation Handler of the Online Clinic Management System allows remote attackers to execute arbitrary database queries via the docid parameter.