CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- oretnom23 simple company websiteSourceCodester Simple Company Website SystemSettings.php unrestricted upload5.1 Medium
- oretnom23 simple company websiteSourceCodester Simple Company Website Content.php unrestricted upload5.1 Medium
- code-projects simple forumcode-projects Simple Forum forum1.php unrestricted upload5.3 Medium
- code-projects simple photo gallerycode-projects Simple Photo Gallery upload-photo.php unrestricted upload6.9 Medium
- code-projects library systemcode-projects Library System profile.php unrestricted upload5.3 Medium
- getredhawkstudio file manager plugin for wordpressWordPress File Manager Plugin For Wordpress plugin <= 7.5 - Arbitrary File Upload Vulnerability9.1 Critical
- codedropz drag and drop multiple file upload (pro) - woocommerceWordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability10.0 Critical
- fusionforgeVulnerability in fusionforge in the shipped Apache configuration, where the web server may...9.8 Critical
- shanghai fanwei network technology e-officeFanwei E-Office Unauthenticated File Upload10.0 Critical
- iroadau fx2 firmwareAn issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can...9.8 Critical
- anisha car rental systemcode-projects Car Rental System add_cars.php unrestricted upload5.3 Medium
- digitalzoomstudio zoomsoundsZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload9.1 Critical
- mozilla firefox, thunderbird +1 moreSave as in Devtools could download files without sanitizing the extension8.1 High
- coderevolution aiomatic, aiomatic - automatic ai content writer & editor, gpt-3 & gpt-4, chatgpt chatbot & ai toolkit +1 moreAiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- elecom co.,ltd. wrc-1167gs2-b, wrc-1167gs2h-b, wrc-1167gst2 +4 more +6 moreUnrestricted upload of file with dangerous type issue exists in WRC-2533GST2 and WRC-1167GST2. If...5.3 Medium
- seeyon zhiyuan oa web application systemSeeyon Zhiyuan OA System Path Traversal File Upload10.0 Critical
- ageerle ruoyi-aiageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload5.3 Medium
- campcodes online recruitment management systemCampcodes Online Recruitment Management System About Content Page ajax.php unrestricted upload5.3 Medium
- fastlinemedia beaver builder, the beaver builder team beaver builder plugin (starter version) +1 moreBeaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- teledyne flir ax8, flir ax8 firmware +1 moreTeledyne FLIR AX8 upload.php unrestricted upload5.3 Medium
- versa director, versa-networks versa director +1 moreThe Versa Director SD-WAN orchestration platform provides an option to upload various types of...7.2 High
- themefic ultimate addons for contact form 7, ultra addons for contact form 7 +1 moreUltimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'7.2 High
- scottyla csv meCSV Me <= 2.0 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- byrev pixabay imagesPixabay Images <= 3.4 - Authenticated (Author+) Arbitrary File Upload8.8 High
- efrotech timetraxAn issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the...9.9 Critical
- sitecore experience manager, experience platform, powershell extension +2 more +4 moreSitecore PowerShell Extension RCE via Unrestricted Upload8.8 High
- trend micro, inc. micro apex central, trendmicro apex central +1 moreAn unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0...4.3 Medium
- nasatheme flozenWordPress Flozen < 1.5.1 - Arbitrary File Upload Vulnerability10.0 Critical
- ovatheme events managerWordPress Ovatheme Events Manager plugin <= 1.8.4 - Arbitrary File Upload vulnerability10.0 Critical
- rextheme wp vrWordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability9.9 Critical
- romancode mapsvgWordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerability9.9 Critical
- merkulove reformer for elementorWordPress Reformer for Elementor plugin <= 1.0.5 - Arbitrary File Upload Vulnerability10.0 Critical
- fastw3b llc fw food menuWordPress FW Food Menu <= 6.0.0 - Arbitrary File Upload Vulnerability10.0 Critical
- glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 moreDrag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks8.1 High
- code-projects simple food ordering systemSourceCodester Simple Food Ordering System editproduct.php unrestricted upload6.9 Medium
- ninjateam file manager pro – filesterFile Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- amentotech workreapWorkreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media'8.8 High
- virtuemartVirtueMart - Unrestricted File Upload7.2 High
- valvepress wordpress automatic pluginWordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.115.0 - Authenticated (Author+) Arbitrary File Upload8.8 High
- axlethemes axle demo importerAxle Demo Importer <= 1.0.3 - Author+ Arbitrary File Upload8.8 High
- tyche softwares abandoned cart pro for woocommerceAbandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- airleader easy firmware, master ii\+ firmware +1 moreThe Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to...7.2 High
- fantasticplugins sumo affiliates proWordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerability10.0 Critical
- echarge hardy barth salia plcceCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload5.3 Medium
- manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 moreRemote Code Execution9.6 Critical
- lerouxyxchire client database management systemSourceCodester Client Database Management System user_update_customer_order.php unrestricted upload6.9 Medium
- agile logix store locator wordpressWordPress Store Locator WordPress plugin <= 1.5.2 - Arbitrary File Upload Vulnerability6.6 Medium
- soar cloud system co., ltd. hrd human resource management system, scshr hr portal +1 moreSoar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type9.9 Critical
- nikhil-bhalerao open source clinic management systemSourceCodester Open Source Clinic Management System manage_website.php unrestricted upload5.3 Medium
- wedevs wp user frontend proWP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- Show moreLoading…