CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- kelerkgibo seo合集(支持百度/google/bing/头条推送)百度站长SEO合集(支持百度/神马/Bing/头条推送) <= 2.0.6 - Unauthenticated Arbitrary File Upload9.8 Critical
- centreon webA user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.8.4 High
- codexthemes thegemTheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- kinfor kfoxKinfor KFOX - Arbitrary File Upload8.7 High
- zong yu okcat parking management platformZONG YU Okcat Parking Management Platform - Arbitrary File Upload9.3 Critical
- keking kkfileviewkkFileView fileUpload unrestricted upload5.3 Medium
- glenwpcoder drag and drop multiple file upload for woocommerceDrag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function9.8 Critical
- 1clickmigration 1 click migration & backup: free wordpress migration plugin with zero downtime & easy clone1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- themekalia envolve pluginEnvolve Plugin <= 1.0 - Unauthenticated Arbitrary File Upload via language_file and fonts_file9.8 Critical
- senior-walter online student clearance systemSourceCodester Online Student Clearance System edit-photo.php unrestricted upload6.9 Medium
- lerouxyxchire client database management systemSourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via...9.8 Critical
- No product listedGrocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php.9.8 Critical
- themefic instantioWordPress Instantio plugin <= 3.3.16 - Arbitrary File Upload Vulnerability6.6 Medium
- binsaifullah beaf, themefic ultimate before after image slider \& gallery +1 moreWordPress BEAF plugin <= 4.6.10 - Arbitrary File Upload Vulnerability9.1 Critical
- netoloji software e-flowArbitrary File Upload in Netoloji Software's E-Flow8.2 High
- tcman gimMultiple vulnerabilities in TCMAN's GIM9.3 Critical
- feng ha ha ssm-erp, production ssm +1 morefeng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java uploadFile unrestricted upload5.3 Medium
- code-projects content management systemitsourcecode Content Management System add_topic.php unrestricted upload5.1 Medium
- kefaming mayikefaming mayi File.php upload unrestricted upload5.3 Medium
- ideacmsIdeaCMS saveUpload unrestricted upload5.3 Medium
- muro external image replaceExternal image replace <= 1.0.8 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- octobercms octoberOctober CMS Allows Unprotected SVG Rename in Media Manager1.1 Low
- newbee-ltd newbee-mallnewbee-mall UploadController.java upload unrestricted upload5.3 Medium
- zhangyanbo2007 youkefuzhangyanbo2007 youkefu MediaController.java upload unrestricted upload5.3 Medium
- multi uploaders multiple file upload, multiple file upload project file upload +1 moreOutsystems Multiple File Upload < 3.1.0 is vulnerable to Unrestricted File Upload. The...6.4 Medium
- g5plus april, auteur, benaa +5 more +7 moreSmart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- elastic kibanaKibana Unrestricted Upload of File with Dangerous Type Can Lead to XSS5.4 Medium
- elastic kibanaKibana Unrestricted Upload of File4.3 Medium
- hcl software domino volt, hcltech domino leap +1 moreHCL Domino Volt is affected by an unrestricted upload of a dangerous file type4.6 Medium
- hcl software domino volt, hcltech domino leap +1 moreHCL Domino Volt is affected by an unrestricted upload of a dangerous file type4.6 Medium
- showdocShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution9.4 Critical
- youyiio beyongcmsyouyiio BeyongCms Document Management Page Upload.html unrestricted upload5.1 Medium
- code-projects news publishing site dashboardcodeprojects News Publishing Site Dashboard Edit Category Page edit-category.php unrestricted upload5.3 Medium
- aeropage sync for airtableAeropage Sync for Airtable <= 3.2.0 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- quantum stornextQuantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE)...9.9 Critical
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability4.6 Medium
- sap netweaver, sap se netweaver (visual composer development server) +1 moreMissing Authorization check in SAP NetWeaver (Visual Composer development server)10.0 Critical
- blubrry powerpress podcastingWordPress PowerPress Podcasting <= 11.12.5 - Arbitrary File Upload Vulnerability9.9 Critical
- wpsoul greenshift – animation and page builder blocks, greenshiftwp greenshift - animation and page builder blocks +1 moreGreenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- tcpwave ddiTCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload (combined with...9.8 Critical
- mingsoft mcmsMCMS allows arbitrary file uploads in the ueditor component9.8 Critical
- kuangstudy kuangsimplebbskuangstudy KuangSimpleBBS QuestionController.java fileUpload unrestricted upload5.3 Medium
- zhenfeng13 my-bbszhenfeng13 My-BBS Endpoint UploadController.java upload unrestricted upload5.3 Medium
- wcmsWCMS Advertisement Image AdvadminController.php sub unrestricted upload5.1 Medium
- codeflist wordpress plugin smart product reviewWordpress Plugin Smart Product Review <= 1.0.4 - Unauthenticated Arbitrary File Upload9.8 Critical
- liquidthemes ai hub - startup & technology wordpress themeAIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_image9.8 Critical
youtube-dlPyPIyoutube-dl vulnerable to file system modification and RCE through improper file-extension sanitization7.8 High- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload5.3 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted upload5.3 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted upload5.3 Medium
- Show moreLoading…