CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- code-projects document management systemcode-projects Document Management System insert.php unrestricted upload5.3 Medium
- salesforce tableau server, tableau server +1 moreUnrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on...8.5 High
- rarlab winrarWinRAR < 5.00 Filename Spoofing RCE8.4 High
- hanwha smart security manager (ssm)Hanwha Techwin SSM 1.32 & 1.4 ActiveMQ File Upload RCE8.6 High
- hybridauthHybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection9.3 Critical
- get-simple getsimplecms, getsimple cms project cms +1 moreGetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload8.7 High
- droipDroip < 2.5.2 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- zhousg letaozhousg letao product.js unrestricted upload5.3 Medium
- i13websolution thumbnail carousel sliderResponsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- smg software information portalArbitrary File Upload in SMG Software's Information Portal10.0 Critical
- motovnet ebook storeEbook Store <= 5.8012 - Unauthenticated Arbitrary File Upload9.8 Critical
- iqonicdesign wpbookitWPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function9.8 Critical
- oscommerce online merchantosCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution9.3 Critical
- sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 moreAn authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management...9.1 Critical
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...8.8 High
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...8.8 High
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...8.1 High
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- No product listedA vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the...7.5 High
- pluck-cms pluckIn Pluck CMS 4.7.20-dev, an authenticated attacker can upload or create a crafted PHP file under...7.2 High
- webmovementllc foxypressFoxyPress <= 0.4.2.1 - Arbitrary File Upload9.8 Critical
- n-media website contact form with file uploadWebsite Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload9.8 Critical
- jerryshensjf jpacookieshop, jpacookieshop 蛋糕商城jpa版 +1 morejerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java addGoods unrestricted upload5.3 Medium
- rommapp rommRomM's authenticated arbitrary file write vulnerability can lead to Remote Code Execution9.4 Critical
- carmelo church donation systemcode-projects Church Donation System admin_pic.php unrestricted upload6.9 Medium
- dell appsyncDell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type...6.6 Medium
- marshmallow-packages nova-tiptapnova-tiptap has an Unauthenticated Arbitrary File Upload Vulnerability8.1 High
- simopro technology winmatrix3 web packageSimopro Technology｜WinMatrix3 Web package - Arbitrary File Upload8.6 High
- netgear rax30 firmwareIn Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following...9.8 Critical
- ruoyiyangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload5.3 Medium
- ambitiousitbd identsoftCodecanyon iDentSoft Account Setting Page updateSetting unrestricted upload5.1 Medium
- emby windowsCWE-434 Unrestricted Upload of File with Dangerous Type8.8 High
- harry0703 moneyprinterturboharry0703 MoneyPrinterTurbo File Extension video.py upload_bgm_file unrestricted upload5.3 Medium
- metasoft metacrmMetasoft 美特软件 MetaCRM sendsms.jsp unrestricted upload5.3 Medium
- metasoft metacrmMetasoft 美特软件 MetaCRM mobileupload.jsp unrestricted upload5.3 Medium
- metasoft metacrmMetasoft 美特软件 MetaCRM upload2.jsp unrestricted upload5.3 Medium
- metasoft metacrmMetasoft 美特软件 MetaCRM sendfile.jsp unrestricted upload5.3 Medium
- jeesitethinkgem JeeSite FileUploadController.java upload unrestricted upload5.3 Medium
- lynton reed work the flow file uploadWork The Flow File Upload <= 2.5.2 - Arbitrary File Upload9.8 Critical
- websitez.com, llc wp mobile detector, wp mobile detector project mobile detector +1 moreWP Mobile Detector <= 3.5 - Arbitrary File Upload9.8 Critical
- eoxia wpshop 2 – e-commerce, wpshop 2 +1 moreWPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload9.8 Critical
- scribu front-end editorFront-end Editor < 2.3 - Arbitrary File Upload9.8 Critical
- stylemixthemes masterstudy lms proMasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- wp swings woocommerce refund and exchange with rma - warranty management, refund policy, manage user walletWooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet <= 3.2.6 - Unauthenticated Arbitrary File Upload9.8 Critical
- simogeo filemanagersimogeo/filemanager arbitrary file upload vulnerability9.8 Critical
- code-projects online ordering system, online ordering system project ordering system +1 morecode-projects Online Ordering System edit_product.php unrestricted upload5.3 Medium
- Show moreLoading…