CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- codeastro online railway reservation system, online railway reservation system project railway reservation system +1 moreCodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload5.1 Medium
- dedebizDedeBIZ Attachment Settings select_images_post.php get_mime_type unrestricted upload5.3 Medium
- dedebizDedeBIZ archives_do.php AdminUpload unrestricted upload5.3 Medium
- dedebizDedeBIZ File Extension file_manage_control.php unrestricted upload5.3 Medium
- dedebizDedeBIZ File Extension media_add.php unrestricted upload5.3 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload8.1 High
- isellerpal enterprise resource management systemFile Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows...8.8 High
- adobe commerce, magento +1 moreAdobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)9.0 Critical
- averta add image slider, carousel slider, coupon popup +5 more +7 moreSlider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- secom dr.id attendance systemSECOM Dr.ID Attendance system - Unrestricted File Upload9.8 Critical
- berqier berqwpWordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability10.0 Critical
- david lingren media library assistantMedia Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action8.8 High
- sap se businessobjects business intelligence platform, sap business objects business intelligence platform +1 moreMultiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform3.1 Low
- sap se businessobjects business intelligence platform, sap business objects business intelligence platform +1 moreMultiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform3.7 Low
- sap se businessobjects business intelligence platform, sap business objects business intelligence platform +1 moreMultiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform4.3 Medium
- fujian mwcmsFujian mwcms uploadfile.html uploadimage unrestricted upload5.1 Medium
- fujian mwcmsFujian mwcms Image Upload uploadeditor.html uploadeditor unrestricted upload5.1 Medium
- gunet open eclass platform, openeclass +1 moreOpen eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php"9.8 Critical
- teamt5 threatsonar anti-ransomwareTeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload7.2 High
- samsung magicinfo 9 serverImproper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9...8.8 High
- productinfoquickAn arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows...9.8 Critical
- daniyalahmedk fuse social floating sidebarFuse Social Floating Sidebar <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload6.4 Medium
- open webui webui, openwebui open webui +1 moreOpen WebUI Arbitrary File Upload + Path Traversal8.8 High
- hp poly clariti managerClariti Manager – Arbitrary File Upload8.8 High
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System setlogo.php unrestricted upload5.3 Medium
- angeljudesuarez airline reservation systemitsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload5.3 Medium
- unitecms blox page builderBlox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- crmperks crm perks forms, crm perks forms – wordpress form builder, crmperks crm perks forms – wordpress form builder +2 moreCRM Perks Forms <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- itsourcecode laravel accounting systemitsourcecode Laravel Accounting System HomeController.php unrestricted upload5.3 Medium
- hamastar meetinghub paperless meetingsHamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous Type9.3 Critical
- angeljudesuarez placement management systemitsourcecode Placement Management System Image resume_upload.php unrestricted upload5.3 Medium
- yaycommerce yayextra, yayextra – woocommerce extra product options +1 moreYayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function9.8 Critical
- baidu ueditorBaidu UEditor unrestricted upload5.3 Medium
- elecom wrc-2533gs2-b firmware, wrc-2533gs2-w firmware, wrc-2533gs2v-b firmware +12 more +14 moreUnrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN...6.8 Medium
- youdiancmsYouDianCMS image_upload.php unrestricted upload5.3 Medium
- fogprojectFOG Authenticated File Upload RCE8.8 High
- itsourcecode alton management system, adonesevangelista restaurant management system +1 moreitsourcecode Alton Management System Add a Menu menu.php unrestricted upload5.1 Medium
- admidioAdmidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment9.1 Critical
- angeljudesuarez society management systemitsourcecode Society Management System student.php unrestricted upload5.3 Medium
- itsourcecode online food ordering systemitsourcecode Online Food Ordering System editproduct.php unrestricted upload5.3 Medium
- cozmoslabs profile builder, unknown user profile builder +1 moreUser Profile Builder < 3.11.8 - Unauthenticated Media Upload9.1 Critical
- cervantessec cervantesCervantes through 0.5-alpha accepts insecure file uploads.5.4 Medium
- medianet ads manager, mnetadmanager media.net ads manager +1 moreMedia.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- webkul qloappsAn arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute...7.2 High
- wpweb social auto posterSocial Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- davidanderson redux framework, redux gutenberg template library \& redux framework +1 moreRedux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting7.2 High
- angeljudesuarez university management systemitsourcecode University Management System Avatar File st_update.php unrestricted upload5.3 Medium
- gargaj wuhuGargaj wuhu Slide Editor slideeditor.php unrestricted upload5.3 Medium
- flute cms, flute-cms flute +1 moreFlute CMS Avatar Upload Page ImagesController.php unrestricted upload5.3 Medium
- automadAutomad arbitrary file upload vulnerability8.8 High
- Show moreLoading…