CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- idera up.time monitoring stationIdera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCE9.3 Critical
- cisco unified intelligence center, unified contact center express +1 moreCisco Unified Intelligence Center Arbitrary File Upload Vulnerability6.3 Medium
- webkul medical prescription attachment plugin for woocommerceWordPress Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Arbitrary File Upload Vulnerability10.0 Critical
- adrian tobey groundhoggWordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability9.1 Critical
- tiki software community association wiki cms groupware, tiki tikiwiki cms\/groupware +1 moreTiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE9.3 Critical
- piwik (now matomo) web analytics platformPiwik Authenticated RCE via Custom Plugin Upload9.4 Critical
- hasthemes download contact form 7 widget for elementor page builder \& gutenberg blocks, htplugins ht contact form – drag & drop form builder for wordpress +1 moreHT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload9.8 Critical
- timelineofficial time-line-TIME LINE has Improper File Validation in Upload Section4.3 Medium
- yijiusmile kkfileviewofficeeditYiJiuSmile kkFileViewOfficeEdit fileUpload unrestricted upload5.3 Medium
- campcodes online movie theater seat reservation systemCampcodes Online Movie Theater Seat Reservation System admin_class.php save_movie unrestricted upload6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System product_update.php unrestricted upload6.9 Medium
- joeybling springboot mybatisplusJoeyBling SpringBoot_MyBatisPlus upload SysFileController unrestricted upload5.3 Medium
- code-projects simple car rental systemcode-projects Simple Car Rental System add_cars.php unrestricted upload5.1 Medium
- ait themes csv import/export, ait-themes csv import \/ export +1 moreAIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload9.8 Critical
- campcodes sales and inventory systemCampcodes Sales and Inventory System product_add.php unrestricted upload6.9 Medium
- eemitch simple file listSimple File List < 4.2.3 - Remote Code Execution9.8 Critical
- beeteam368 extensionsBeeTeam368 Extensions <= 2.3.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- iqonic wpbookitWPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- iqonic wpbookitWPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload9.8 Critical
- code-projects library systemcode-projects Library System profile.php unrestricted upload5.3 Medium
- code-projects library systemcode-projects Library System profile.php unrestricted upload5.3 Medium
- builderengine cmsBuilderEngine 3.5.0 RCE via Unauthenticated Arbitrary File Upload9.3 Critical
- processmakerProcessMaker < 3.5.4 Authenticated Plugin Upload RCE8.6 High
- ibm analytics content hubIBM Analytics Content Hub file upload6.8 Medium
- code-projects library management systemcode-projects/Fabian Ros Library Management System profile_update.php unrestricted upload5.3 Medium
- genetech solutions wordpress pie register pluginWordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE10.0 Critical
- code-projects library management systemcode-projects Library Management System student_edit_photo.php unrestricted upload5.3 Medium
- canonical jujuArbitrary executable upload via authenticated endpoint8.8 High
- carmelo staff audit systemcode-projects Staff Audit System test.php unrestricted upload5.3 Medium
- code-projects e-commerce sitecode-projects E-Commerce Site users_photo.php unrestricted upload5.3 Medium
- siemens tia project-server, tia project-server v17, totally integrated automation portal (tia portal) v17 +3 more +5 moreA vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project...5.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System candidates_add.php unrestricted upload5.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System voters_add.php unrestricted upload5.3 Medium
- marvell qconvergeconsoleMarvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability9.8 Critical
- anisha online note sharingcode-projects Online Note Sharing Profile Image userprofile.php unrestricted upload5.3 Medium
- simSimStudioAI sim Session route.ts POST missing authentication6.9 Medium
- boyuncms project boyuncmsBoyunCMS Index.php unrestricted upload5.3 Medium
- blackvue dashcam 590x, blackvuenorthamerica blackvue dr590x firmware +1 moreBlackVue Dashcam 590X HTTP Endpoint upload.cgi unrestricted upload5.3 Medium
- liquidthemes logisticshubWordPress LogisticsHub theme <= 1.1.6 - Arbitrary File Upload Vulnerability10.0 Critical
- fastw3b llc fw galleryWordPress FW Gallery plugin <= 8.0.0 - Arbitrary File Upload Vulnerability10.0 Critical
- creedally bulk featured imageWordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability9.1 Critical
- metagauss download pluginDownload Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- e4jconnect vikrentcar, e4jvikwp vikrentcar car rental management system +1 moreVikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- bolt cms, boltcms bolt +1 moreBolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename7.5 High
- webfactory aibud wpWordPress AiBud WP plugin <= 1.9 - Arbitrary File Upload vulnerability9.1 Critical
github.com/lf-edge/ekuiperGo,github.com/lf-edge/ekuiper/v2Go +1 moreeKuiper /config/uploads API arbitrary file writing may lead to RCE7.3 High- wpvivid migration\, backup\, staging, wpvividplugins wpvivid — backup, migration & staging +1 moreMigration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- codedropz drag and drop multiple file upload (pro) - woocommerceDrag and Drop Multiple File Upload (Pro) - WooCommerce <= 1.7.1 and 5.0 - 5.0.5 - Unauthenticated Arbitrary File Upload9.8 Critical
- code-projects library systemcode-projects Library System add-book.php unrestricted upload5.3 Medium
- oretnom23 simple company websiteSourceCodester Simple Company Website Users.php unrestricted upload5.1 Medium
- Show moreLoading…