CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- code42In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been...9.8 Critical
- open-emr openemrOpenEMR v5.0.1-6 allows code execution.7.2 High
- estatikThe estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload ...6.5 Medium
- estatikThe estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via...7.5 High
- pimcorePimcore Unrestricted Upload of File with Dangerous Type8.8 High
- cysteme cysteme-finderThe cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of...9.8 Critical
- dynamicpress neosenseThe Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload.9.8 Critical
- doccmsupload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote...9.8 Critical
- phpok okliteframework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability...8.8 High
- symphonyextensions rich text formatterThe Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an...9.8 Critical
- egain chateGain Chat 15.0.3 allows unrestricted file upload.9.8 Critical
- sentrifugoMultiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow...8.8 High
- crelly slider project sliderThe crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file...8.8 High
- wc-marketplace wc catalog enquiryThe woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload...7.5 High
- elearningfreak insert or embed articulate contentThe insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has...8.8 High
- cszcms csz cmsCSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager...9.8 Critical
- iptanus wordpress file uploadThe wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of ...7.5 High
- iptanus wordpress file uploadThe wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of ...7.5 High
- iptanus wordpress file uploadThe wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of...7.5 High
- iptanus wordpress file uploadThe wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of ...7.5 High
- mirasys vmsMirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of...9.8 Critical
- oscommerceosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....7.2 High
- humanica humatrix 7The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated...9.8 Critical
- artica integria imsfilemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki...9.8 Critical
- leaftecnologia leaf adminThe profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a...8.8 High
- hewlett packard enterprise (hpe) hpe 3par service processor, hp 3par service processor firmware +1 moreA remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version...8.8 High
- enhancesoft osticketAn issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation...5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Unrestricted File Upload7.2 High
- adobe systems incorporated magento 2, magento +1 moreMagento Filter extension bypass via crafted store configuration keys7.2 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Unsafe File Upload7.5 High
- cpanelcPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238).7.3 High
- cpanelcPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface ...6.7 Medium
- cpanelcPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload...6.7 Medium
- wallaceit wallaceposUnrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote,...7.2 High
- edx edx-platformedx-platform before 2015-07-20 allows code execution by privileged users because the course...8.8 High
- ahsay cloud backup suiteAn insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0...8.8 High
- gorul gourl, gourl.io gourl wordpress plugin +1 moreGoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is:...7.5 High
- modx revolution, modx revolution gallery +1 moreMODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous...7.5 High
- akuvox sp-r50p firmwareMissing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50...7.2 High
- rangerstudio directus 7 apiIn Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads/_...8.8 High
- rangerstudio directus 7 apiIn Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP...8.8 High
- rangerstudio directus 7 apiDirectus 7 API before 2.3.0 does not validate uploaded files. Regardless of the file extension or...8.8 High
- code42 crashplan for small business, for enterprise +1 moreCode42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6...7.0 High
- layerbbLayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename...9.8 Critical
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal...7.5 High
- pluck-cms pluckcmsPluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous...9.8 Critical
- siemens simatic pcs 7 v8.0 and earlier, simatic pcs 7 v8.1, simatic pcs 7 v8.2 +14 more +16 moreA vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS...7.2 High
- siemens digsi 5 engineering software, siemens ag all other siprotec 5 device types with cpu variants cp300 and cp100 and the respective ethernet communication modules, siprotec 5 device types 6md85, 6md86, 6md89, 7um85, 7sa87, 7sd87, 7sl87, 7vk87, 7sa82, 7sa86, 7sd82, 7sd86, 7sl82, 7sl86, 7sj86, 7sk82, 7sk85, 7sj82, 7sj85, 7ut82, 7ut85, 7ut86, 7ut87 and 7ve85 with cpu variants cp300 and cp100 and the respective ethernet communication modules +3 more +5 moreA vulnerability has been identified in SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87,...7.5 High
- hunesion i-onenetHunesion i-oneNet unrestricted file upload vulnerability8.8 High
- sap netweaver application server java, sap se netweaver for java application server - web container (engineapi), netweaver for java application server - web container (servercode) +2 moreSAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7...7.2 High
- Show moreLoading…