CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- s9y serendipityAn arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute...8.8 High
- bitapps bit formBit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload9.8 Critical
- storage unit rental management system project unit rental management systemFile Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a...9.8 Critical
- extplorereXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows...8.8 High
- weaver e-officeWeaver E-Office uploadify.php unrestricted upload6.3 Medium
- phpokFile Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain...8.8 High
- genesys tftp serverAn issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a...8.8 High
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3...7.2 High
- crmebCRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the...9.8 Critical
- agilepoint nxAgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload8.8 High
- cmsmadesimple cms made simpleFile upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers...7.2 High
- mblog project mblogOS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via...7.8 High
- mingsoft mcmsMCMS vulnerable to arbitrary code execution via crafted thumbnail8.8 High
- oretnom23 online food ordering systemAn arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of...9.8 Critical
- sem-cms semcmsSemcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the...9.8 Critical
- e-officeWeaver E-Office unrestricted upload7.3 High
- cltphpCLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application...9.8 Critical
- f5 big-iq, big-iq centralized management +1 moreBIG-IQ iControl REST Vulnerability5.4 Medium
- unknown zyrex popup, zyrex popup +1 moreZyrex Popup <= 1.0 - Admin+ Arbitrary File Upload7.2 High
- jedoxIncorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5...8.8 High
- apache streampark, apache software foundation streampark (incubating) +1 moreApache StreamPark (incubating): Upload any file to any directory9.8 Critical
- antabot white-jotter project white-jotterFile upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute...9.8 Critical
- dedecmsDedeCMS config.php UpDateMemberModCache unrestricted upload6.3 Medium
- crmebZhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted upload4.7 Medium
- textpatternAn arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows...8.8 High
- tibco spotfire statistics servicesTIBCO Spotfire Statistics Services Unrestricted File Upload Vulnerability9.8 Critical
- ibm cloud pak for dataIBM Cloud Pak for Data file upload7.2 High
- cltphpCLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.8.8 High
- telindus apsalAn issue was discovered in the Open Document feature in Telindus Apsal 3.14.2022.235 b. An...8.2 High
- kiwitcms kiwi, kiwi tcms +1 moreKiwi TCMS unrestricted file upload vulnerability8.1 High
- meinberg ltos, meinbergglobal lantime firmware +1 moreImproper Input Validation in Meinberg LTOS7.2 High
- cyberpower powerpanel, powerpanel business management, powerpanel business local / remote +2 moreUnrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business9.1 Critical
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System unrestricted upload6.3 Medium
- hansuncms project hansuncmshansunCMS unrestricted upload6.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Unauthenticated access vulnerability in J-Web5.3 Medium
- 71note go-bbsgo-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component ...8.8 High
- glpi-project positionsThe Cartography (aka positions) plugin before 6.0.1 for GLPI allows remote code execution via PHP...9.8 Critical
- online pizza ordering project pizza orderingOnline Pizza Ordering v1.0 was discovered to contain an arbitrary file upload vulnerability which...8.8 High
- employee performance evaluation system project performance evaluation systemEmployee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload...8.8 High
- purchase order management project order managementPurchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability...8.8 High
- froxlor, froxlor froxlor/froxlor +1 moreUnrestricted Upload of File with Dangerous Type in froxlor/froxlor9.1 Critical
- textpatternAn arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below...7.2 High
- gdidees cmsGDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability...7.5 High
- doyocms project doyocmsFile Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute...9.8 Critical
- tpadmin project tpadminyuan1994 tpAdmin Upload.php Upload unrestricted upload6.3 Medium
- crocoblock jetengine, jetengine for elementor +1 moreJetEngine < 3.1.3.1 - Author+ Remote Code Execution8.8 High
- apache linkisApache Linkis Mangaer module engineConn material upload exists Zip Slip issue9.8 Critical
- apache linkisApache Linkis publicsercice module unrestricted upload of file9.8 Critical
- progress sitefinityAn issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1...9.8 Critical
- gdidees cmsAn arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows...9.8 Critical
- Show moreLoading…