CVE-2025-11347: code-projects Student Crud Operation Add Student Page/Edit Student add.php move_uploaded_file unrestricted upload
A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function moveuploadedfile of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11347?
CVE-2025-11347 is considered to have a high severity due to its potential for unrestricted file uploads.
How do I fix CVE-2025-11347?
To fix CVE-2025-11347, ensure proper file type validations and restrictions on the uploaded files in the add.php function.
What software is affected by CVE-2025-11347?
CVE-2025-11347 affects the Code-projects Student Crud Operation up to version 3.3.
What kind of attack is possible with CVE-2025-11347?
CVE-2025-11347 allows for file upload manipulation, leading to potential remote code execution.
Where in the code does CVE-2025-11347 occur?
CVE-2025-11347 occurs in the move_uploaded_file function within add.php of the Add Student Page/Edit Student Page.