CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- nocodbNocoDB Allows Preview of File with Dangerous Content5.7 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store unrestricted upload5.3 Medium
- agentejo cockpit, cockpit cms, cockpit cms +2 moreUnrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo9.8 Critical
- j.n. breetvelt a.k.a. opajaap wp photo album plusWordPress WP Photo Album Plus plugin <= 8.7.01.001 - Unauth. Arbitrary File Upload vulnerability10.0 Critical
- thomas scholl canvasio3d lightWordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerability9.9 Critical
- pk favicon managerWordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerability9.1 Critical
- jordy meow ai engine: chatgpt chatbot, meowapps ai engine +1 moreWordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability9.1 Critical
- unknown z-downloadsWordPress Z-Downloads plugin <= 1.11.3 - Auth. Arbitrary File Upload vulnerability9.1 Critical
- kognetiks chatbot for wordpressWordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- nikhil-bhalerao open source clinic management systemSourceCodester Open Source Clinic Management System setting.php unrestricted upload5.3 Medium
- ibm security guardiumIBM Security Guardium denial of service2.7 Low
- kognetiks chatbot for wordpress, kognetiks .com chatbot +1 moreKognetiks Chatbot for WordPress <= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function9.8 Critical
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload8.8 High
- campcodes legal case management systemCampcodes Legal Case Management System Setting general-setting unrestricted upload5.1 Medium
- bmc track-it!, track-it\! +1 moreBMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability8.8 High
- wshberlin startklar elementor addonsStartklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Upload9.8 Critical
- roothubRoothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath...9.8 Critical
- emlogAn arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views...6.3 Medium
- fast5 prison management systemSourceCodester Prison Management System edit-photo.php unrestricted upload6.3 Medium
- voltronic power viewpower pro, voltronicpower viewpower +1 moreVoltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability9.8 Critical
- triangle microworks scada data gatewayTriangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability7.2 High
- triangle microworks scada data gatewayTriangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability6.5 Medium
- netgear prosafe network management systemNETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability8.8 High
- netgear prosafe network management systemNETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability8.8 High
- zhongcheng ticketing management platformAn arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04...9.8 Critical
- instawp connect – 1-click wp staging & migration, connect +1 moreInstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload9.8 Critical
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image8.8 High
- royal-elementor-addons royal elementor addons, wproyal royal elementor addons and templates, royal addons for elementor – addons and templates kit for elementor +2 moreRoyal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload8.2 High
- donbermoy pisay online e-learning systemSourceCodester Pisay Online E-Learning System controller.php unrestricted upload7.3 High
- recrystallize software recrystallive serverReCrystallize Server 5.10.0.0 allows administrators to upload files to the server. The file...7.2 High
- ofofonobs hubbankUnrestricted Upload of File with Dangerous Type vulnerability in HubBank9.9 Critical
- cubecartFile Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute...8.0 High
- themeisle ppom – product addons & custom fields for woocommerce, product addons \& fields for woocommerce +1 moreProduct Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file9.8 Critical
- webkul uvdesk, webkul software uvdesk community +1 moreUnauthenticated Remote Code Execution in UvDesk Community10.0 Critical
- red hat trusted profile analyzerBzip2: compressed content bomb leads to denial of service of bombastic api4.3 Medium
- thinkcmfThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.9.8 Critical
- code-projects simple school management systemFile Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple...6.3 Medium
- pyloadpyLoad allows upload to arbitrary folder lead to RCE9.1 Critical
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +1 more +3 moreWordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability9.9 Critical
- tribulant newslettersWordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerability9.1 Critical
- wp lab wp-lister lite for ebayWordPress WP-Lister Lite for eBay plugin <= 3.5.11 - Arbitrary File Upload vulnerability9.1 Critical
- incsub forminator, wpmudev broken link checker +1 moreForminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type...5.3 Medium
- dedecmsA File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via...9.8 Critical
- mozilo mozilocmsAn issue discovered in moziloCMS v2.0 allows attackers to bypass file upload restrictions and run...6.5 Medium
- ivanti avalancheAn Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3...8.8 High
- library system project system, sourcecodester home clean service system, home cleaning service system +2 moreSourceCodester Home Clean Service System Photo student.add.php unrestricted upload6.3 Medium
- infotheme wp poll makerWordPress WP Poll Maker plugin <= 3.4 - Authenticated Arbitrary File Upload vulnerability9.9 Critical
- jizhicmsjizhiCMS 2.5 suffers from a File upload vulnerability.9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .xrm-ms files. *Note: This issue...9.8 Critical
- phpgurukul tourism management systemPhpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with...8.1 High
- Show moreLoading…