CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- zzcmsZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to...9.8 Critical
- textpatternThere is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8,...8.8 High
- unknown wp mail logWP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE8.8 High
- rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 morertMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE8.8 High
- startutorial php backend for resumable.jsresumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5 allows arbitrary file...8.1 High
- dreamer cms, iteachyou dreamer cms +1 moreDreamer CMS uploadFile unrestricted upload6.3 Medium
- ibm planning analyticsIBM Planning Analytics file upload8.0 High
- phpgurukul online notes sharing systemPHPGurukul Online Notes Sharing System add-notes.php unrestricted upload5.5 Medium
- totolink ex1200l firmwareTOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the...9.8 Critical
- automadautomad Content Type FileCollectionController.php upload unrestricted upload4.7 Medium
- codedropz drag and drop multiple file upload for woocommerceWordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities6.5 Medium
- lightxun iptv gatewayLightxun IPTV Gateway web_upload_template.html unrestricted upload4.3 Medium
- woorockets corsaWordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File Upload9.9 Critical
- zendrop, zendrop – global dropshipping +1 moreWordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload10.0 Critical
- themely theme demo importWordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload9.1 Critical
- olive themes one click demo import, olivethemes olive one click demo import +1 moreWordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload9.1 Critical
- hm plugin wordpress job board and recruitment plugin – jobwp, hmplugin jobwp +1 moreWordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload10.0 Critical
- amadercode lab dropshipping & affiliation with amazon, amadercode dropshipping \& affiliation with amazon +1 moreWordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload9.9 Critical
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +2 moreWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload9.9 Critical
- woocommerce automatewooWordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload9.9 Critical
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload9.9 Critical
- akshay menariya export import menusWordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload9.9 Critical
- galdub folders – unlimited folders to organize media library folder, pages, posts, file manager, premio folders +1 moreWordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload9.1 Critical
- jeff starr user submitted posts – enable users to submit posts from the front end, plugin-planet user submitted posts +1 moreWordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload9.0 Critical
- themify ultraWordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload9.9 Critical
- revolution slider slider revolutionWordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload8.4 High
- symbiostockWordPress Symbiostock Lite Plugin <= 6.0.0 is vulnerable to Arbitrary File Upload9.1 Critical
- kakadu software pty ltd sdk, kakadusoftware kakadu sdk +1 moreJPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if the server allows the attacker to upload a specially-crafted t…7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreUnrestricted Upload of File with Dangerous Type8.8 High
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager file upload6.6 Medium
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4...7.2 High
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4...7.2 High
- unknown vrm 360 3d model viewer, maurice vrm360 +1 moreVrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE8.8 High
- codelyfe stupid simple cmscodelyfe Stupid Simple CMS upload.php unrestricted upload5.5 Medium
- forestblog project forestblogsaysky ForestBlog Image Upload img unrestricted upload6.3 Medium
- collabora kodexplorerkalcaddle KodExplorer API Endpoint unrestricted upload6.3 Medium
- kaifa technology webitr, kaifa webitr attendance system +1 moreKaifa Technology WebITR - Arbitrary File Upload8.8 High
- smartstar software cws web-base, csharp cws collaborative development platform +1 moreSmartStar Software CWS Web-Base - Arbitrary File Upload9.8 Critical
- g5plus essential real estateEssential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- e2pdf, oleksandrz e2pdf – export pdf tool for wordpress +1 moreE2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- itpison omicard edm 's sms, omicard edm +1 moreITPison OMICARD EDM 's SMS - Arbitrary File Upload9.8 Critical
- pluck-cms pluckAn arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4...8.8 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Web Interface5.5 Medium
- europeana repoxUnrestricted Upload of File with Dangerous Type in Repox10.0 Critical
- code-projects student information systemStudent Information System v1.0 - Insecure File Upload9.9 Critical
- byzoro s210, smart s210 firmware +1 moreByzoro S210 HTTP POST Request uploadfile.php unrestricted upload6.3 Medium
- byzoro smart s20, smart s20 firmware +1 moreByzoro Smart S20 HTTP POST Request updateos.php unrestricted upload6.3 Medium
- ami aptiov, aptio v +1 moreFailure when uploading a Logo image file7.5 High
- ami aptiov, aptio v +1 moreFailure when uploading a Logo image file7.5 High
- rockoa xinhuxinhu xinhuoa 2.2.1 contains a File upload vulnerability.9.8 Critical
- Show moreLoading…