CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store Avatar unrestricted upload6.3 Medium
- cdesigner project cdesignerPrestashop cdesigner v3.1.3 to v3.1.8 was discovered to contain a code injection vulnerability...9.8 Critical
- dynamic transaction queuing system project transaction queuing systemAn arbitrary file upload vulnerability in /admin/ajax.php?action=save_uploads of Dynamic...7.2 High
- readium readium-jsAn arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute...9.8 Critical
- cisco webex meetingsCisco Webex Meetings Web UI Vulnerabilities5.4 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability5.3 Medium
- ulearn project ulearnUlearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator...7.2 High
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store index.php unrestricted upload6.3 Medium
- fernus informatics lms, fernus learning management systems +1 moreUnrestricted Upload of File with Dangerous Type in Fernus LMS9.8 Critical
- monitorrFile Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary...7.8 High
- uvdesk community-skeletonUvdesk remote code execution vulnerability8.8 High
- kitesky kitecmsFile Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary...7.2 High
- kitesky kitecmsPermissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via...9.8 Critical
- go-fastdfs project go-fastdfssjqzhang go-fastdfs File Upload uploa upload path traversal7.3 High
- otcmsOTCMS unrestricted upload6.3 Medium
- gladinet centrestackAn unrestricted file upload vulnerability in the administrative portal branding component of...7.2 High
- generex ups cs141, cs141 firmware +1 morePrivilege Escalation via file upload vulnerability at Generex CS1414.3 Medium
- generex ups cs141, cs141 firmware +1 moreRCE via file upload vulnerability in Generex CS14110.0 Critical
- ibosIBOS htaccess unrestricted upload6.3 Medium
- simple and beautiful shopping cart system project and beautiful shopping cart system, sourcecodester simple and beautiful shopping cart system +1 moreSourceCodester Simple and Beautiful Shopping Cart System upload.php unrestricted upload6.3 Medium
- sourcecodester young entrepreneur e-negosyo system, young entrepreneur e-negosyo system project entrepreneur e-negosyo system +1 moreSourceCodester Young Entrepreneur E-Negosyo System unrestricted upload7.3 High
- nextcloud server, kiteworks security-advisories +1 moreUnrestricted filenames for logo or favicon as admin in the theming settings in nextcloud server2.4 Low
- acymailing, acymailing newsletter plugin for joomla in the enterprise version +1 moreUnauthenticated RCE affecting the AcyMailing plugin for Joomla9.8 Critical
- hadskyHadSky unrestricted upload4.7 Medium
- atrocoreIn Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is...9.8 Critical
- hitachi energy sdm600SDM600 file permission validation9.9 Critical
- mk-authAn arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers...8.8 High
- sauter ey-as525f001 with moduweb, sauter-controls ey-as525f001 firmware +1 moreCVE-2023-286526.5 Medium
- pluck-cms pluck, pluck pluck-cms +1 moreAuthenticate Remote Code Execution in Pluck CMS7.2 High
- hgiga inc. oaklouds, hgiga oaklouds portal +1 moreHGiga Inc. OAKlouds - Arbitrary File Upload9.8 Critical
- wisdomgarden tronclass ilearnWisdomGarden Tronclass ilearn - Broken Access Control6.5 Medium
- basercmsbaserCMS allows any file to be uploaded9.8 Critical
- basercmsbaserCMS File Uploader Remote Code Execution (RCE) vulnerability9.8 Critical
- awsm embed any document, awsm innovations embed any document – embed pdf, word, powerpoint and excel files +1 moreWordPress Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- cszcms csz cmsFile upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute...8.8 High
- code-projects simple online hotel reservation systemcode-projects Simple Online Hotel Reservation System add_room.php unrestricted upload6.3 Medium
- sourcecodester storage unit rental management system, storage unit rental management system project unit rental management system +1 moreSourceCodester Storage Unit Rental Management System unrestricted upload4.7 Medium
- simple and beautiful shopping cart system project and beautiful shopping cart system, sourcecodester simple and beautiful shopping cart system +1 moreSimple and Beautiful Shopping Cart System uploadera.php unrestricted upload6.3 Medium
- generalbytes crypto application serverGeneral Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM...9.1 Critical
- rockoaRockOA acloudCosAction.php.SQL runAction unrestricted upload6.3 Medium
- simple and nice shopping cart script project and nice shopping cart script, sourcecodester simple and nice shopping cart script +1 moreSourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted upload6.3 Medium
- statamic cmsxzjie cms upload unrestricted upload6.3 Medium
- simple music player project music player, sourcecodester simple music player +1 moreSourceCodester Simple Music Player save_music.php unrestricted upload6.3 Medium
- meizhou qingyunke qykcmsMeizhou Qingyunke QYKCMS Update api.php unrestricted upload4.7 Medium
- gadget works online ordering system project works online ordering system, sourcecodester gadget works online ordering system +1 moreSourceCodester Gadget Works Online Ordering System Products unrestricted upload4.7 Medium
- code-projects simple art gallerySimple Art Gallery adminHome.php sliderPicSubmit unrestricted upload6.3 Medium
- netgear rax30 firmwareWhen uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden ...8.8 High
- perfree perfreeblogAn arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1...9.8 Critical
- jizhicmsAn arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms...7.2 High
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System save_menu unrestricted upload6.3 Medium
- Show moreLoading…