CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- cisco identity services engine, identity services engine software, identity services engine passive identity connector +2 moreCisco Identity Services Engine Access Control Bypass Vulnerability4.9 Medium
- motivian content management systemFile Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker...8.2 High
- umbraco cms, umbraco-cms +1 moreUmbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads5.5 Medium
- bitpressadmin file managerBit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads6.4 Medium
- eruptErupt Unrestricted Upload of File with Dangerous Type vulnerability5.4 Medium
- jehc jehc-bpmAn arbitrary file upload vulnerability in the component /server/executeExec of JEHC-BPM v2.0.1...10.0 Critical
- wso2 api manager, carbon synapse artifact uploader be, enterprise integrator +4 more +6 moreAuthenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution6.8 Medium
- chaitak-gorai blogbookchaitak-gorai Blogbook posts.php unrestricted upload5.3 Medium
- gradio-app gradioGradio Allows Unauthorized File Copy via Path Manipulation5.3 Medium
- freescoutFreeScout Vulnerable to Arbitrary File Upload7.0 High
- huocmsHuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass...5.3 Medium
- huocmsHuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of...5.3 Medium
- lerouxyxchire client database management systemSourceCodester Client Database Management System user_order_customer_update.php unrestricted upload6.9 Medium
- stylemixthemes masterstudy lms proMasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- senior-walter web-based pharmacy product management systemSourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability...8.6 High
- realce tecnologia queue ticket kioskRealce Tecnologia Queue Ticket Kiosk Image File ajax.php unrestricted upload5.3 Medium
- llisoft mta maita training systemllisoft MTA Maita Training System OpenController.java this.fileService.download unrestricted upload5.3 Medium
- h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 moreH3C SecCenter SMP-E1114P02 importFile unrestricted upload5.3 Medium
- project team tmall demo, tmall demo +1 moreTmall Demo uploadCategoryImage unrestricted upload5.1 Medium
- project team tmall demo, tmall demo +1 moreTmall Demo uploadProductImage unrestricted upload5.1 Medium
- emagicone store manager for woocommerceeMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()9.8 Critical
- emagicone store manager for woocommerceeMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()8.1 High
- joy2012bd jp students result management system premiumWordPress JP Students Result Management System Premium plugin 1.1.7 - Arbitrary File Upload vulnerability9.0 Critical
- wordwebsoftware crossword compiler puzzlesWordPress Crossword Compiler Puzzles plugin <= 5.2 - Arbitrary File Upload Vulnerability9.9 Critical
- staggsWordPress STAGGS plugin <= 2.11.0 - Arbitrary File Upload Vulnerability10.0 Critical
- printcart web to print product designer for woocommerceWordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.3.9 - Arbitrary File Upload Vulnerability10.0 Critical
- elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 moreWordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability9.9 Critical
- ajar productions in5 embedWordPress Ajar in5 Embed plugin <= 3.1.5 - Arbitrary File Upload Vulnerability10.0 Critical
- mojoomla hospital management systemWordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability9.9 Critical
- storekeeper b.v. for woocommerceWordPress StoreKeeper for WooCommerce plugin <= 14.4.4 - Arbitrary File Upload Vulnerability10.0 Critical
- shopxozongzhige ShopXO ZIP File Payment.php Upload unrestricted upload5.3 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized File Upload and Execute PHP6.0 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized File Upload6.0 Medium
- manageengine servicedesk plus msp, supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreLocal File Inclusion6.5 Medium
- mapsvgMapSVG - All Kinds of Maps and Store Locator for WordPress <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- campcodes online shopping portalCampcodes Online Shopping Portal edit-subcategory.php unrestricted upload5.1 Medium
- typo3TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer5.4 Medium
- mojoomla hospital management systemWordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability10.0 Critical
- mojoomla wpamsWordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability10.0 Critical
- mojoomla wpamsWordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability9.9 Critical
- templateinvaders ti woocommerce wishlistWordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload Vulnerability10.0 Critical
- dkszone celestial auraWordPress Celestial Aura plugin <= 2.2 - Arbitrary File Upload vulnerability9.9 Critical
- dkszone eximiusWordPress Eximius theme <= 2.2 - Arbitrary File Upload vulnerability9.9 Critical
- phpgurukul car rental project, car rental portal +1 morePHPGurukul Car Rental Project post-avehical.php unrestricted upload5.1 Medium
- lerouxyxchire client database management systemSourceCodester Client Database Management System user_delivery_update.php unrestricted upload6.9 Medium
- coderevolution echo rss feed post generatorEcho RSS Feed Post Generator <= 5.4.8.1 - Unauthenticated Arbitrary File Upload9.8 Critical
- coderevolution crawlomatic multipage scraper post generatorCrawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload9.8 Critical
- feng ha ha ssm-erp, production ssm +1 morefeng_ha_ha/megagao ssm-erp/production_ssm PictureServiceImpl.java uploadPicture unrestricted upload5.3 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System product.php unrestricted upload5.3 Medium
- emlogEmlog Pro Contains a File Upload Vulnerability8.9 High
- Show moreLoading…