CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- elementor website builder, elementor.com elementor website builder +1 moreWordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability9.9 Critical
- trustindex widgets for google reviewsWordPress Widgets for Google Reviews plugin <= 11.0.2 - Arbitrary File Upload vulnerability8.0 High
- theme-fusion avadaWordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability8.5 High
- artbees jupiter x core, jupiterx core +1 moreWordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability9.0 Critical
- wen solutions wp child theme generatorWordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability9.1 Critical
- terry lin wp githuber mdWordPress WP Githuber MD plugin <= 1.16.2 - Arbitrary File Upload vulnerability9.1 Critical
- zachary segal catablogWordPress CataBlog plugin <= 1.7.0 - Arbitrary File Upload vulnerability9.1 Critical
- julien crego manager for icomoonWordPress Manager for Icomoon plugin <= 2.0 - Arbitrary File Upload vulnerability9.1 Critical
- onthegosystems typesWordPress Toolset Types plugin <= 3.4.17 - Authenticated Arbitrary File Upload Vulnerability7.2 High
- mainwp file uploader extensionWordPress MainWP File Uploader Extension Plugin <= 4.1 - Unauthenticated Arbitrary File Upload Vulnerability10.0 Critical
- mndpsingh287 theme editorWordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability7.2 High
- webtoffee product import export for woocommerceWordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability9.1 Critical
- phpmyfaqphpMyFAQ's File Upload Bypass at Category Image Leads to RCE7.2 High
- lepton-cms lepton, leptoncms +1 moreFile Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute...8.8 High
- cyberaz0r webratcyberaz0r WebRAT api.php download_file unrestricted upload5.3 Medium
- sourcecodester simple file manager, ganeshrkt simple file manager web app +1 moreSourceCodester Simple File Manager unrestricted upload6.3 Medium
- givanz vvvebjsVvvebJs Arbitrary File Upload vulnerability6.5 Medium
- magicflu, magicflue +1 moreFile Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute...9.8 Critical
- gesundheit bewegt gmbh zippyWordPress Zippy plugin <= 1.6.9 - Arbitrary File Upload vulnerability8.8 High
- donbermoy complete e-commerce site, sourcecodester complete ecommerce site +1 moreSourceCodester Complete E-Commerce Site users_photo.php unrestricted upload4.7 Medium
- mispIn MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly...9.8 Critical
ibexa/corePackagistIbexa Kernel's files with blacklisted extensions can be still saved to draftsNo scoreezsystems/ezplatform-kernelPackagistIbexa Kernel's files with blacklisted extensions can be still saved to draftsNo score- geoserverGeoServer arbitrary file upload vulnerability in REST Coverage Store API7.2 High
- online discussion forum site project discussion forum site, razormist online discussion forum site +1 moreSourceCodester Online Discussion Forum Site uupdate.php unrestricted upload6.3 Medium
- israelb1 management app for woocommerce – order notifications, order management, lead management, uptime monitoring, management app for woocommerce, wemanage +2 moreManagement App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring <= 1.2.2 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- themefic tourficWordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability9.9 Critical
- cegid meta4 hrMultiple vulnerabilities on Meta4 HR from Cegid9.0 Critical
- remyandrade file manager app, sourcecodester file management app +1 moreSourceCodester File Manager App update-file.php unrestricted upload6.3 Medium
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreUnrestricted Upload of File with Dangerous Type vulnerability in AMSS++9.9 Critical
- a.k.i software pmc.exeInsufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I...4.3 Medium
- genetech products pie register, pie register register +1 moreWordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerability10.0 Critical
- panda xgo pandaxPandaXGO PandaX File Extension upload.go unrestricted upload6.3 Medium
- 74cms74CMS Company Logo Index.php#sendCompanyLogo unrestricted upload6.3 Medium
- magesh-k21 online-college-event-hall-reservation-systemMAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php unrestricted upload6.3 Medium
- magesh-k21 online-college-event-hall-reservation-systemMAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php unrestricted upload6.3 Medium
- linkedin greykitegreykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj...7.5 High
- airflow-diagrams project airflow-diagramsAirflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the...9.8 Critical
- webedition cmsWebedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php6.5 Medium
- gunet open eclass platform, openeclass +1 moreUnrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and...9.1 Critical
- eyoucmsThere is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4,...9.8 Critical
- arcserve unified data protection, udp +1 moreAuthentication Bypass via wizardLogin in Arcserve Unified Data Protection8.8 High
- brizy, themefusecom brizy – page builder, brizy brizy-page builder +2 moreBrizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- code-projects student enrollment, student enrollment in php +1 moreAn arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student...9.8 Critical
- devolutions serverGacjie Server Upload.php index unrestricted upload5.4 Medium
- palantir com.palantir.acme.gaia:gaiaStored XSS in gaia6.8 Medium
- cms made simple made simple, cmsmadesimple cms made simple, cmsmadesimple +2 moreUnrestricted Upload of File with Dangerous Type in CMS Made Simple9.8 Critical
- code-projects employee management systemSourceCodester Employee Management System add-admin.php unrestricted upload4.7 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Unintended script file upload in CHARX Series5.3 Medium
- keerti1924 online-book-store-website, online bookstore, online bookstore website +2 morekeerti1924 Online-Book-Store-Website unrestricted upload4.7 Medium
- Show moreLoading…