CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- admission management system project management system, code-projects admission management system +1 morecode-projects Admission Management System student_avatar.php unrestricted upload6.3 Medium
- flusity cms, flusity +1 moreflusity CMS upload.php handleFileUpload unrestricted upload4.7 Medium
- sugarcrmAn issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File...8.8 High
- codeastro pos systemCodeAstro POS System Logo setting unrestricted upload6.3 Medium
- codeastro pos systemCodeAstro POS System Profile Picture profil unrestricted upload6.3 Medium
- remyandrade file manager appSourceCodester File Manager App add-file.php unrestricted upload6.3 Medium
- idattend idwebArbitrary File Upload to Web Root In IDAttend’s IDWeb Application8.8 High
- zzzcmsFile Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code...7.8 High
- zzzcmsFile Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code...9.8 Critical
- lavasoft web companionM-Files Web Companion allows Remote Code Execution for some filetypes8.2 High
- simple-press simple\, simplepress simple:press forum, thesimplepressforumteam simple\:press forum +2 moreSimple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload9.8 Critical
- knowband supercheckoutKnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with...9.8 Critical
- hcl software compass, hcltech hcl compass +1 moreAn unrestricted file upload vulnerability affects HCL Compass9.0 Critical
- mayurik best courier management systemSourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the...7.2 High
- easyuse mailhunter ultimateUnrestricted Upload of File with Dangerous Type in EasyUse MailHunter Ultimate9.9 Critical
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege command execution7.2 High
- lylme spageAn arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0...9.8 Critical
- oretnom23 expense management systemAn issue in Expense Management System v.1.0 allows a local attacker to execute arbitrary code via...7.8 High
- esst monitoringeSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability...8.8 High
- reciply project reciplyreciply Plugin uploadImage.php unrestricted upload6.3 Medium
- 10web form maker, unknown form maker by 10web +1 moreForm-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload9.8 Critical
- ibm security verify governanceIBM Security Verify Governance file upload3.3 Low
- qdpmqdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to...9.8 Critical
- koha-community koha library softwareFile Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker...5.3 Medium
- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f firmware +1 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted upload6.3 Medium
- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f firmware +1 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload6.3 Medium
- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f firmware +1 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload6.3 Medium
- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f firmware +1 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform userattestation.php unrestricted upload6.3 Medium
- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f, smart s45f firmware +2 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted upload6.3 Medium
- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f firmware +1 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload6.3 Medium
- concretecms concrete cmsConcreteCMS vulnerable to Stored Cross-site Scripting5.4 Medium
- sick apu0200 firmware, sick ag apu0200 +1 moreImproper Access Control in SICK APU allows an unprivileged remote attacker to download as well...8.2 High
- atos unify openscape common managementAtos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an...8.8 High
- simple and nice shopping cart script project and nice shopping cart scriptFile Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker...8.8 High
- pigcmspigcms up to 7.0 was discovered to contain an arbitrary file upload vulnerability.9.8 Critical
- personal-management-system personal management systemAn arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to...7.8 High
- dcnetworks dcfw-1800-sdc firmwareFile Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated...8.8 High
- icp das et-7060, icpdas et-7060 firmware +1 moreUnrestricted file upload vulnerability in ICP DAS ET-70607.2 High
- riello ups netman-204, riello-ups netman 204 firmware +1 moreNetMan 204 Remote Code Execution10.0 Critical
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige8.8 High
- emlogAn arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0...9.8 Critical
- emlogAn arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0...9.8 Critical
- mojoportalFile Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary...9.8 Critical
- mojoportalFile Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary...9.8 Critical
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreUnrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq6.5 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal upload_save_student.php unrestricted upload6.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal student_avatar.php unrestricted upload6.3 Medium
- openrapid rapidcmsOpenRapid RapidCMS uploadicon.php isImg unrestricted upload6.3 Medium
- gym management system project management system project, projectworlds gym management system project +1 moreGym Management System Project v1.0 - Insecure File Upload9.1 Critical
- online book store project book store project, projectworlds online book store project +1 moreOnline Book Store Project v1.0 - Insecure File Upload8.8 High
- Show moreLoading…