Free Hospital Management System for Small Practices version 1.0 suffers from a cross site request forgery vulnerability.