CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- happysoft nbs\&happysoftwechatNBS&HappySoftWeChat unrestricted upload6.3 Medium
- acymailing.com acymailing component for joomla, acyba acymailing starter +1 moreExtension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.09.8 Critical
- online travel agency system project travel agency systemFile Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to...7.2 High
- online travel agency system project travel agency systemFile Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to...7.2 High
- campcodes complete online matrimonial website system scriptinstall/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS...9.8 Critical
- wolf18 easyadmin8File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute...9.8 Critical
- tigergraphAn issue was discovered in Tigergraph Enterprise 3.7.0. A single TigerGraph instance can host...6.5 Medium
- tigergraphAn issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform allows users to...6.5 Medium
- bloofox bloofoxcmsFile Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute...9.8 Critical
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3...6.8 Medium
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4...6.8 Medium
- phpjabbers ticket support scriptA File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute...9.8 Critical
- full - customer, fullservices full – cliente +1 moreFULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation8.8 High
- bdtask pharmacy management system, pharmacy management system project management system +1 moreSourceCodester Pharmacy Management System manage_website.php unrestricted upload6.3 Medium
- sem-cms semcmsFile Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via...7.2 High
- bjrjk linuxasmcallgraphbjrjk/LinuxASMCallGraph before commit 20dba06 allows attackers to cause a RCE on the server side via uploading a crafted ZIP file due to incorrect filtering rules of uploaded file8.8 High
- omeka omeka/omeka-s, s +1 moreUnrestricted Upload of File with Dangerous Type in omeka/omeka-s9.9 Critical
- byzoro smart s85f management platform, smart s85f +1 moreByzoro Smart S85F Management Platform unrestricted upload6.3 Medium
- wbce cmsAn arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1...7.2 High
- typechoA File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code...8.8 High
- dedecmsDedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE).8.8 High
- totalcms total cmsFile Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code...8.8 High
- oxid-esales eshopOXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified...5.3 Medium
- brocade fabric os, broadcom brocade fabric operating system +1 moreCLI allows upload or transfer files of dangerous types5.5 Medium
- webkul uvdeskAn arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code...7.8 High
- ajaxmanager project ajaxmanagerAn Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and...9.8 Critical
- sysaid, sysaid on-premises +1 moreSysaid - CWE-434: Unrestricted Upload of File with Dangerous Type9.8 Critical
- papercut ng, mf +1 morePaperCut NG Unauthenticated File Upload8.2 High
- generic model organism database project gbrowse** UNSUPPPORTED WHEN ASSIGNED ** GBrowse accepts files with any formats uploaded and places them...9.8 Critical
- pligg cmsPligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE)...9.8 Critical
- weaver e-officeAn arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute...9.8 Critical
- vocera report server, voice server +1 moreAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is...7.5 High
- nokia netactAn issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can...8.8 High
- openrapid rapidcmsOpenRapid RapidCMS upload.php unrestricted upload4.7 Medium
- dahua smart park management, dahuasecurity smart parking management +1 moreDahua Smart Park Management unrestricted upload6.3 Medium
- sourcecodester house rental and property listing system, house rental and property listing php project rental and property listing php +1 moreSourceCodester House Rental and Property Listing System btn_functions.php unrestricted upload6.3 Medium
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx unrestricted upload5.5 Medium
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System File Name ImageStationDataService.asmx random values2.6 Low
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System Ajaxfileupload.ashx unrestricted upload5.5 Medium
- wolfcode easyadmin8EasyAdmin8 File Upload Module index.html unrestricted upload3.9 Low
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System upload.aspx unrestricted upload5.5 Medium
- gen technology four mountain torrent disaster prevention and control of monitoring and early warning system, istrong four mountain torrent disaster prevention\, control monitoring and early warning system +1 moreGen Technology Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System UploadFloodPlanFileUpdate.ashx unrestricted upload5.5 Medium
- bug finder foody friendBug Finder Foody Friend Profile Picture profile unrestricted upload4.3 Medium
- infodoc document on-line submission and approval systemInfoDoc Document On-line Submission and Approval System - Arbitrary File Upload9.8 Critical
- keysight geolocation server, keysight technologies n6845a geolocation server +1 moreKeysight N6845A Relative Path Traversal7.8 High
- avaya aura device servicesAvaya Aura Device Services Remote Code Execution8.6 High
- pygmentsPygments vulnerable to ReDoS5.5 Medium
- iagona scrutiswebIagona ScrutisWeb Unrestricted Upload of File with Dangerous Type10.0 Critical
- evertz 3080ipx, 7801fc, 7890ixg +3 more +5 moreEVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are...8.8 High
- veritas infoscale operations managerThe XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows...7.2 High
- Show moreLoading…