CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- rockgod100 theme file duplicatorWordPress Theme File Duplicator Plugin <= 1.3 - Arbitrary File Upload vulnerability9.9 Critical
- solacewp solace extraWordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerability9.9 Critical
- joomsky js job managerWordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability10.0 Critical
- romancode mapsvgWordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability9.9 Critical
- aidraw i drawWordPress I Draw <= 1.0 - Arbitrary File Upload Vulnerability9.1 Critical
- sunnet technology co., ltd. wisdom master proWisdom Master Pro - Unrestricted Upload of File with Dangerous Type5.3 Medium
- mathieu chartier wp-advanced-searchWordPress WP-Advanced-Search plugin <= 3.3.9.4 - Arbitrary File Upload Vulnerability6.6 Medium
- stellarwp kadence woocommerce email designerWordPress Kadence WooCommerce Email Designer plugin <= 1.5.14 - Arbitrary File Upload vulnerability9.1 Critical
- symfonia ready Remote Code Execution via Unrestricted File Upload in Ready_7.1 High
- oretnom23 online id generator systemSourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload...9.8 Critical
- epc ai hubWordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerability10.0 Critical
- code-projects my-blog-layuiZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted upload5.3 Medium
- westboy cicadascmswestboy CicadasCMS JSP Parser upload unrestricted upload5.3 Medium
- veal98 小牛肉 echo 开源社区系统veal98 小牛肉 Echo 开源社区系统 uploadMdPic unrestricted upload6.9 Medium
- code-projects studentmanagerhuanfenz/code-projects StudentManager Announcement Management Section uploadArticle.do unrestricted upload5.1 Medium
- ghostxbh uzy-ssm-mallghostxbh uzy-ssm-mall uploadUserHeadImage unrestricted upload5.3 Medium
- softclever limited sync postsWordPress Sync Posts Plugin <= 1.0 - Arbitrary File Upload vulnerability9.9 Critical
- ability, inc accessibility suiteWordPress Accessibility Suite plugin <= 4.18 - Arbitrary File Upload vulnerability6.5 Medium
- labcat processing projectsWordPress Processing Projects Plugin <= 1.0.2 - Arbitrary File Upload vulnerability9.1 Critical
- brian batt - elearningfreak.com insert or embed articulate content into wordpressWordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000025 - Arbitrary File Upload vulnerability9.1 Critical
- nirmal kumar ram wp remote thumbnailWordPress WP Remote Thumbnail Plugin <= 1.3.2 - Arbitrary File Upload vulnerability9.9 Critical
- codeastro internet banking systemA Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0...8.8 High
- bogdan bendziukov squeezeWordPress Squeeze plugin <= 1.6 - Arbitrary File Upload vulnerability9.1 Critical
- No product listedAn insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute...8.1 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreAuthenticated Remote Code Execution Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write7.2 High
- haxtheweb issues, psu haxcms-php +1 moreHAX CMS PHP allows Insecure File Upload to Lead to Remote Code Execution10.0 Critical
- aiasmymagicpower AIAS LocalStorageController.java unrestricted upload5.3 Medium
- iqonicdesign streamitStreamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- iteaj iboot, iboot 物联网网关 +1 moreiteaj iboot 物联网网关 Admin Password pwd access control5.3 Medium
- code-projects nimrodgodcheese/code-projects Nimrod FileRestController.java unrestricted upload5.3 Medium
- kentico xperienceKentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions...7.2 High
- ibm maximo application suiteIBM Maximo Application Suite file upload5.5 Medium
- niteothemes cmp – coming soon & maintenanceWordPress CMP – Coming Soon & Maintenance plugin <= 4.1.14 - Remote Code Execution (RCE) vulnerability9.1 Critical
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted upload5.3 Medium
- wofficeio woffice core, xtendify woffice +1 moreWoffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- booster for woocommerce, pluggabl booster for woocommerce +1 moreBooster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting7.2 High
- booster for woocommerce, pluggabl booster for woocommerce +1 moreBooster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload8.1 High
- projeqtorProjeqtor saveAttachment.php unrestricted upload2.3 Low
- wondercmsWonderCMS Theme Installation/Plugin Installation installUpdateModuleAction unrestricted upload5.1 Medium
- etoilewebdesign front end usersFront-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload9.8 Critical
- dell wyse management suite, wyse management suite repository +1 moreDell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File...4.7 Medium
- contempoinc real estate 7 wordpressWP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload8.8 High
- smackcoders wp ultimate csv importer – import csv, xml & excel into wordpressImport Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- project worlds online time table generatorProject Worlds Online Time Table Generator updateprofile.php unrestricted upload5.3 Medium
- project worlds online time table generatorProject Worlds Online Time Table Generator updatestudent.php unrestricted upload5.3 Medium
- project worlds online time table generatorProject Worlds Online Time Table Generator add_student.php unrestricted upload5.3 Medium
- appointifyWordPress Appointify plugin <= 1.0.8 - Arbitrary File Upload vulnerability6.6 Medium
- wcmsWCMS Article Publishing Page CKEditor unrestricted upload5.3 Medium
- code-projects college management systemcode-projects College Management System student.php unrestricted upload5.3 Medium
- bluestar micro mallBluestar Micro Mall api.php unrestricted upload5.3 Medium
- Show moreLoading…