CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- dedecmsAn arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows...9.8 Critical
- cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 moreCisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities6.5 Medium
- bbraun spacecom2An Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to...6.5 Medium
- nascent remkon device managerThe assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0 allows...9.8 Critical
- flatcore flatcore-cmsRemote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin...7.2 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +10 more +12 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- seopanelA remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0. This...8.8 High
- phpmywindUnrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via...7.2 High
- bluditUnrestricted File Upload in Bludit v3.8.1 allows remote attackers to execute arbitrary code by...9.8 Critical
- apache ofbizArbitrary file upload vulnerability in OFBiz9.8 Critical
- ivanti connect secure, pulsesecure pulse connect secure +1 moreA vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator...7.2 High
- fusionbox widgyUnrestricted Upload of File with Dangerous Type in django-widgy9.8 Critical
- simple image gallery web app project image gallery web appAn unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web...9.8 Critical
- pearadmin thinkPear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers...9.8 Critical
- sitecoreSitecore through 10.1, when Update Center is enabled, allows remote authenticated users to upload...8.8 High
- aikcmsFile Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file...7.2 High
- 8cms ljcmsAn arbitrary file upload vulnerability in the move_uploaded_file() function of LJCMS v4.3 allows...9.8 Critical
- easycorp zentaoThe EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability....9.8 Critical
- maccmsAn arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows...9.8 Critical
- newsone cms project cmsAn arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1...8.8 High
- 23andme yamaleCommand injection in Yamale7.8 High
- amentotech workreapWorkreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution9.8 Critical
- jeecg bootJeecg-Boot CMS arbitrary file upload vulnerability9.8 Critical
- w3 eden, inc. wordpress download manager, w3eden download manager +1 moreWordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload7.5 High
- fortinet fortiportalAn unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4...5.4 Medium
- houdunren hdcmsAn arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to...7.8 High
- vaethinkAn arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows...9.8 Critical
- phone shop sales management system project shop sales management systemArbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.9.8 Critical
- online covid vaccination scheduler system project covid vaccination scheduler systemSourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary...9.8 Critical
- objectplanet opinioadmin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable...8.8 High
- trend micro apex one, officescan, worry-free business security +3 more +5 moreAn improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service,...8.8 High
- learning management system project management systemArbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows...9.8 Critical
- nchsoftware ivm attendantNCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading...8.8 High
- victor cms project cmsArbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary...9.8 Critical
- responsive ordering system project ordering systemArbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows...9.8 Critical
- travel management system project management systemArbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows...9.8 Critical
- e-commerce website project websiteArbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers...9.8 Critical
- online ordering system project ordering systemArbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to...9.8 Critical
- alumni management system project management systemArbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows...9.8 Critical
- storeapps woocommerce stock manager, stock manager for woocommerce +1 moreCross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin8.8 High
- learning digital orca hcmLearningdigital.com, Inc. Orca HCM - Unrestricted Upload of File with Dangerous Type9.8 Critical
- Show moreLoading…