CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- yonyou yonbipAn arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of...9.8 Critical
- ejinshan terminal security systemFile upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload...9.8 Critical
- xpand-it write-back managerAn arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to...9.8 Critical
- progress openedge, openedge innovation +1 moreProgress Application Server (PAS) for OpenEdge File Upload via Directory Traversal9.1 Critical
- statamic cmsYunyou CMS Common.php unrestricted upload7.3 High
- cisco unity connectionA vulnerability in the web-based management interface of Cisco Unity Connection could allow an...7.3 High
- cires21 c21 live encoder and live mosaic, live encoder +1 moreUnrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic10.0 Critical
- koalaapps my account page editorMy Account Page Editor < 1.3.2 - Subscriber+ Arbitrary File Upload8.8 High
- themely theme demo importTheme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload7.2 High
- traccarAn unrestricted file upload vulnerability in traccar leads to RCE8.5 High
- zhongfucheng3y austinZhongFuCheng3y Austin Upload Material Menu MaterialController.java getFile unrestricted upload5.5 Medium
- code-projects fighting cock information systemcode-projects Fighting Cock Information System new-father.php unrestricted upload6.3 Medium
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreCommand execution using the certificate upload utility8.8 High
- ujcmsFile Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via...5.4 Medium
- inc2734 mw wp form, mw wp form project wp form +1 moreMW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload9.8 Critical
- piotnet forms, piotnetdotcom piotnet forms +1 morePiotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File Upload8.1 High
- wpsoul greenshift, greenshift – animation and page builder blocks +1 moreGreenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload7.2 High
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload8.8 High
- sigb pmbFile Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and...7.2 High
- wwbn avideoA unrestricted php file upload vulnerability exists in the import.json.php temporary copy...4.3 Medium
- phpgurukul hospital management systemA JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management...9.8 Critical
- likeshopLikeshop HTTP POST Request File.php userFormImage unrestricted upload7.3 High
- g5plus essential real estateEssential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload8.8 High
- unknown ni purchase order(po) for woocommerce, naziinfotech ni purchase order\(po\) for woocommerce +1 moreNi Purchase Order(PO) For WooCommerce <= 1.2.1 - Admin+ File Upload to Remote Code Execution7.2 High
- byzoro smart s150 management platform, smart s150 firmware +1 moreByzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted upload6.3 Medium
- studip stud.ipStud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because...9.0 Critical
- dedecmsDeDeCMS Backend file_class.php unrestricted upload4.7 Medium
- js help desk – best help desk & support plugin, wiselyhub js help desk +1 moreWordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload10.0 Critical
- class.upload.phpStored XSS in class.upload.php5.4 Medium
- kashipara online notice board systemOnline Notice Board System v1.0 - Insecure File Upload8.8 High
- hcl software dryice myxalyticsUnauthenticated File Upload affects DRYiCE MyXalytics8.2 High
- gl-inet gl-a1300 firmware, gl-ar300m firmware, gl-ar750 firmware +9 more +11 moreAn issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the...7.2 High
- codeastro internet banking systemCodeAstro Internet Banking System Profile Picture pages_account.php unrestricted upload6.3 Medium
- nia rrj nueva ecija engineer online portal, rrj nueva ecija engineer online portal +1 moreRRJ Nueva Ecija Engineer Online Portal Add Downloadable downloadable.php unrestricted upload6.3 Medium
- nia rrj nueva ecija engineer online portal, rrj nueva ecija engineer online portal +1 moreRRJ Nueva Ecija Engineer Online Portal Avatar dasboard_teacher.php unrestricted upload4.7 Medium
- dedebizMuyun DedeBIZ Add Attachment unrestricted upload4.7 Medium
- unknown wp mail logWordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload9.9 Critical
- dynamiapps frontend admin, shabti frontend admin by dynamiapps +1 moreWordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File Upload10.0 Critical
- piotnet forms, piotnetdotcom piotnet forms +1 moreWordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File Upload9.0 Critical
- joris van montfort jvm gutenberg rich text iconsWordPress JVM rich text icons Plugin <= 1.2.3 is vulnerable to Arbitrary File Upload9.9 Critical
- bertha ai, bertha.ai bertha ai. your ai co-pilot for wordpress and chrome +1 moreWordPress BERTHA AI Plugin <= 1.11.10.7 is vulnerable to Arbitrary File Upload10.0 Critical
- soft8soft verge3d, soft8soft llc verge3d publishing and e-commerce +1 moreWordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload9.9 Critical
- jacques malgrange rencontre – dating site, boiteasite download rencontre - dating site +1 moreWordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File Upload10.0 Critical
- pixelemu terraclassifieds, terraclassifieds – simple classifieds plugin +1 moreWordPress TerraClassifieds Plugin <= 2.0.3 is vulnerable to Arbitrary File Upload10.0 Critical
- ioss wp mlm software plugin, wpmlmsoftware wp mlm unilevel +1 moreWordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Arbitrary File Upload10.0 Critical
- gopeak masterlabgopeak MasterLab User.php update unrestricted upload4.7 Medium
- campcodes chic beauty salonCampcodes Chic Beauty Salon Product product-list.php unrestricted upload4.7 Medium
- gopeak masterlabgopeak MasterLab User.php base64ImageContent unrestricted upload6.3 Medium
- jizhicmsFile Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via...8.8 High
- Show moreLoading…