CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- artbees jupiter x coreJupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload9.8 Critical
- scriptcaseUnrestricted Upload of File with Dangerous Type vulnerability on Scriptcase10.0 Critical
- cs-cart multivendorFile Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary...8.8 High
- cs-cart multivendorFile Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary...9.8 Critical
- campcodes online shopping portal, online shopping portal project shopping portal +1 moreCodezips Online Shopping Portal insert-product.php unrestricted upload5.3 Medium
- itsourcecode online bookstore, angeljudesuarez online book store project +1 moreitsourcecode Online Bookstore admin_add.php unrestricted upload5.3 Medium
- gdidees cmsGDidees CMS <= v3.9.1 has a file upload vulnerability.9.8 Critical
- closed-loop cless serverAn arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology...9.8 Critical
- mayurik best house rental management systemBest House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the...9.8 Critical
- dedecmsDedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.8.8 High
- contaoRemote command execution through file upload in contao/core-bundle8.3 High
- inspireui mstore api – create native android & ios apps on the cloud, mstore api +1 moreMStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload4.3 Medium
- simple online planning so planning, soplanning +1 moreRemote Code Execution through File Upload in SOPlanning before 1.52.0210.0 Critical
- ininet solutions gmbh spidercontrol scada web server, spidercontrol scada webserver +1 moreiniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type8.7 High
- bitapps file manager, bitpressadmin bit file manager wordpress +1 moreBit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- mozilo mozilocmsAn arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows...7.2 High
- qualitor, qualitor qalitor +1 moreQualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in...9.8 Critical
- beaverbuilder customizer export/import, fastlinemedia customizer export\/import, the beaver builder team cutomizer export\/import +2 moreCustomizer Export/Import <= 0.9.7 - Authenticated (Admin+) Arbitrary File Upload via Customization Settings Import6.6 Medium
- phpgurukul job portalFile upload restriction bypass vulnerability in Job Portal9.9 Critical
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user...8.8 High
- ibm webmethods integrationIBM webMethods Integration code execution9.9 Critical
- mingsoft mcmsMCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution.8.1 High
- sourcecodester petshop management system, nelzkie15 pet shop management system +1 moreSourceCodester Petshop Management System add_client.php unrestricted upload5.3 Medium
- sourcecodester petshop management system, nelzkie15 pet shop management system +1 moreSourceCodester Petshop Management System add_user.php unrestricted upload5.3 Medium
- hfo4 shudong-shareHFO4 shudong-share File Extension fileReceive.php unrestricted upload5.3 Medium
- 6shr system project system, gether technology 6shr system, gethertechnology 6shr +2 moreGether Technology 6SHR System - Unrestricted File Upload8.8 High
- feehi feehicmsFeehiCMS index.php insert unrestricted upload5.3 Medium
- feehi feehicmsFeehiCMS index.php createBanner unrestricted upload5.3 Medium
- feehi feehicmsFeehiCMS index.php update unrestricted upload5.3 Medium
- funnelforms free, interactive contact form and multi step form builder with drag & drop editor – funnelforms free +1 moreFunnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- rems zipped folder manager appSourceCodester Zipped Folder Manager App add-folder.php unrestricted upload5.3 Medium
- rockwell automation thinmanager® thinserver™, rockwellautomation thinmanager thinserver +1 moreRockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities8.5 High
- ruijie eg2000k, eg2000k firmware +1 moreRuijie EG2000K index.php unrestricted upload5.1 Medium
- beikeshop, beikeshop chengdu everbrite network technology +1 moreChengdu Everbrite Network Technology BeikeShop FileManagerController.php rename unrestricted upload5.3 Medium
- file manager pro, filemanagerpro file manager pro +1 moreFile Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- publiccmspubliccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin...7.2 High
- e-commerce system project system, janobe e-commerce system +1 moreSourceCodester E-Commerce System controller.php unrestricted upload5.3 Medium
- versa director, versa-networks versa director +1 moreThe Versa Director GUI provides an option to customize the look and feel of the user interface....6.6 Medium
- acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress, acymailing +1 moreAcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function7.5 High
- jayesh hotel management systemKashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin...7.2 High
- kashipara music management systemAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in...8.8 High
- kashipara music management systemAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in...8.8 High
- lopalopa music management systemAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in...8.8 High
- kashipara music management systemAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of...9.8 Critical
- adegans adrotate banner manager, adrotate banner manager project banner manager +1 moreAdRotate – Ad manager & AdSense Ads <= 5.13.2 - Authenticated (Admin+) Double Extension Arbitrary File Upload7.2 High
- adonesevangelista laravel property management systemitsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted upload5.3 Medium
- adonesevangelista laravel property management systemitsourcecode Laravel Property Management System PropertiesController.php upload unrestricted upload5.3 Medium
- jerryhanjj erpAn arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary...9.8 Critical
- bit apps form pro, bitapps bit form, bit form pro +2 moreWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability9.9 Critical
- douco douphpDouPHP Favicon system.php unrestricted upload5.1 Medium
- Show moreLoading…