Online Student Enrollment System version 1.0 suffers from an unauthenticated arbitrary file vulnerability.