Online Covid Vaccination Scheduler System version 1.0 suffers from a remote shell upload vulnerability.