A critical, unauthenticated file upload vulnerability in code-projects Student Crud Operation allows remote attackers to achieve remote code execution.

The application fails to properly validate file uploads within the add.php script, specifically utilizing the move_uploaded_file function. This allows an unauthenticated remote attacker to upload arbitrary files to the server, resulting in potential remote code execution.

Successful exploitation of this vulnerability permits an unauthenticated attacker to execute arbitrary code on the underlying host. This could lead to a total system compromise, including unauthorized access to sensitive student data, full system control, and potential lateral movement within the network. Given the CVSS score of 7.3, this represents a significant risk to organizational integrity and data confidentiality.

Immediate Action: As no official vendor patch is currently available, administrators should immediately restrict access to the affected web directory or disable the student registration functionality entirely until a secure update is released.

Proactive Monitoring: Review web server access logs for anomalous POST requests to add.php, especially those containing file upload signatures or requests resulting in unexpected file types in the upload directory.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized file uploads and inspect incoming traffic for malicious payloads targeting the add.php endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the linked research repository.

This vulnerability presents a severe risk because it allows unauthenticated remote code execution. Organizations utilizing Student Crud Operation should treat this as a high-priority incident. If the software is not mission-critical, remove it from the environment until the vendor provides a secure, patched version.