CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- ibm integration bus for z/os, integration bus +1 moreIBM Integration Bus for z/OS denial of service6.5 Medium
- mispAn issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a...9.8 Critical
- oaooa pichomeFile Upload vulnerability index.php in Pichome v.1.1.01 allows a remote attacker to execute...9.8 Critical
- softwarepublico e-sic livreFile Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote...8.8 High
- easycorp zentao, zentao biz, zentao max +2 moreAn arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10...9.8 Critical
- xxyopen novel-plusAn arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com...9.8 Critical
- xxyopen novel-plusAn arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb...9.8 Critical
- xxyopen novel-plusAn arbitrary File download vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb...9.8 Critical
- mitel unify openscape xpressions webassistantAn issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42...8.8 High
- octobercms octoberOctober CMS Cross-site Scripting vulnerability7.8 High
- codeastro restaurant pos system, restaurant pos system project pos system +1 moreCodeAstro Restaurant POS System update_product.php unrestricted upload6.3 Medium
- juanpao jpshopJuanpao JPShop UploadsController.php actionUpdate unrestricted upload6.3 Medium
- juanpao jpshopJuanpao JPShop API PosterController.php actionUpdate unrestricted upload6.3 Medium
- juanpao jpshopJuanpao JPShop API MaterialController.php actionUpdate unrestricted upload6.3 Medium
- juanpao jpshopJuanpao JPShop API ComboController.php actionIndex unrestricted upload6.3 Medium
- juanpao jpshopJuanpao JPShop API ComboController.php actionIndex unrestricted upload6.3 Medium
- juanpao jpshopJuanpao JPShop API AppController.php unrestricted upload6.3 Medium
- byzoro smart s40 management platform, smart s40 firmware +1 moreByzoro Smart S40 Management Platform Import web.php unrestricted upload4.7 Medium
- huaxiaerp jsherpjshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface...9.8 Critical
- ispyconnect agent dvrUnrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to...8.8 High
- file manager pro, filemanagerpro file manager, ninja team file manager pro +2 moreFile Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- unitecms unlimited addons for wpbakery page builderUnlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload7.2 High
- extendify editorskit, munirkamal gutenberg block editor toolkit – editorskit +1 moreEditorsKit <= 1.40.3 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- meowapps ai engine, tigroumeow ai engine – the chatbot, ai framework & mcp for wordpress +1 moreAI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url6.6 Medium
- unknown 3dprint lite3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload9.8 Critical
- mingsoft mcmsmingSoft MCMS File Upload vulnerability8.8 High
- national keep cyber security services cybermathMalicious File Upload in National Keep's CyberMath9.8 Critical
- openbiopenBI Upload.php index unrestricted upload7.3 High
- openbiopenBI Unity.php uploadUnity unrestricted upload6.3 Medium
- crmperks database for contact form 7, wpforms, elementor forms, database for contact form 7\, wpforms\, elementor forms +1 moreContact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- schlix cmsAn arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated...7.2 High
- openbiopenBI Icon Screen.php uploadIcon unrestricted upload7.3 High
- openbiopenBI Icon.php uploadIcon unrestricted upload7.3 High
- openbi project openbiopenBI File.php uploadFile unrestricted upload7.3 High
- oretnom23 facebook news feed likeSourceCodester Facebook News Feed Like Post unrestricted upload6.3 Medium
- code-projects employee management systemSourceCodester Employee Management System Profile Page edit-photo.php unrestricted upload4.7 Medium
- byzoro smart s210 management platform, smart s210 firmware +1 moreByzoro Smart S210 Management Platform uploadfile.php unrestricted upload6.3 Medium
- niushop b2b2c, b2b2c multi-business +1 moreNiushop B2B2C Upload.php unrestricted upload6.3 Medium
- shopsiteAn arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0...6.1 Medium
- motorola mr2600, mr2600 firmware +1 moreMotorola MR2600 Arbitrary Firmware Upload Vulnerability9.0 Critical
- lepton-cms leptoncmsAn arbitrary file upload vulnerability in LeptonCMS v7.0.0 allows authenticated attackers to...7.2 High
- ukrsolution barcode scanner and inventory managerWordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File Upload10.0 Critical
- webtoffee order export & order import for woocommerce, order export \& order import for woocommerce +1 moreWordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload8.0 High
- webtoffee product import export for woocommerceWordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload8.0 High
- trend micro, inc. micro apex central, trendmicro apex central +1 moreAn unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote...8.8 High
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreImproper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1...8.8 High
- online admission system project admission system, project worlds online admission system +1 moreProject Worlds Online Admission System documents.php unrestricted upload6.3 Medium
- dedecmsDedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.8.8 High
- yonyou yonbipAn arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action...9.8 Critical
- yonyou yonbipAn arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action...9.8 Critical
- Show moreLoading…