CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- formcmsFormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability6.1 Medium
- fujian apex livebosLiveBos UploadFile.do Arbitrary File Upload10.0 Critical
- qingdao dongsheng weiye software co., ltd. dongsheng logistics softwareDongsheng Logistics Software Unauthenticated Arbitrary File Upload10.0 Critical
- zhejiang dahua technology co., ltd. smart park integrated management platformDahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload10.0 Critical
- nelzkie15 human resource information systemSourceCodester Human Resource Information System editemployee_process.php unrestricted upload6.9 Medium
- nelzkie15 human resource information systemSourceCodester Human Resource Information System editemployee_process.php unrestricted upload6.9 Medium
- uatech badasoBadaso CMS file upload vulnerability9.8 Critical
- njtech greencmsGreenCMS index.php unrestricted upload5.3 Medium
- securden unified pamSecurden Unified PAM Unauthenticated Unrestricted File Upload7.5 High
- mossle lemonxuhuisheng lemon CmsArticleController.java uploadImage unrestricted upload5.3 Medium
- statamic cms, wanglongcn yifang +1 moreYiFang CMS P_file.php mergeMultipartUpload unrestricted upload5.3 Medium
- givanz vvvebgivanz Vvveb media.php unrestricted upload5.3 Medium
- ibm integrated analytics systemIBM Integrated Analytics System file upload8.0 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal allows unrestricted upload of file in the style books component6.8 Medium
- salesforce tableau server, tableau server +1 moreUnrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on...7.3 High
- salesforce tableau server, tableau server +1 moreUnrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on...7.3 High
- dootaskDooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via...3.5 Low
- dootaskAn authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask...8.8 High
- aveva pi integratorAVEVA PI Integrator Unrestricted Upload of File with Dangerous Type7.1 High
- infinitt healthcare pacs system managerINFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type5.3 Medium
- infinitt healthcare pacs system managerINFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type5.3 Medium
- an-themes pin wpWordPress Pin WP theme < 7.2 - Arbitrary File Upload Vulnerability9.9 Critical
- unopimUnoPim vulnerable to remote code execution through Arbitrary File upload7.3 High
- emlogEmlog Pro blogger.php unrestricted upload5.1 Medium
- mattermost, mattermost server +1 moreMattermost Shared Channel Upload Type Validation Bypass6.8 Medium
- No product listedMoss before v0.15 has a file upload vulnerability. The "upload" function configuration allows...8.6 High
- directusDirectus allows unauthenticated file upload and file modification due to lacking input sanitization9.3 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Unvalidated File Upload5.1 Medium
- wpdeveloper templatelyWordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability10.0 Critical
- imran emu tc testimonialsWordPress TC Testimonials plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability10.0 Critical
- storekeeper b.v. for woocommerceWordPress StoreKeeper for WooCommerce Plugin <= 14.4.4 - Arbitrary File Upload Vulnerability10.0 Critical
- elextensions reachship woocommerce multi-carrier & conditional shippingWordPress ReachShip WooCommerce Multi-Carrier & Conditional Shipping <= 4.3.1 - Arbitrary File Upload Vulnerability9.9 Critical
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreWordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability9.1 Critical
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System travellers.php unrestricted upload5.3 Medium
- fortra filecatalystUnrestricted File Upload in FileCatalyst8.2 High
- moonshineMoonShine Arbitrary File Upload Vulnerability5.4 Medium
- boom-core boomvA vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where...4.3 Medium
- acrel environmental monitoring cloud platformAcrel Environmental Monitoring Cloud Platform UploadNewsImg unrestricted upload5.3 Medium
- dasinfomedia school management system for wordpressSchool Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload8.8 High
- storychiefStoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload9.8 Critical
- phoca.cz - phoca commander for joomlaExtension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla9.2 Critical
- bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builderContact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload9.8 Critical
- linlinjava litemalllinlinjava litemall Endpoint AdminStorageController.java create unrestricted upload5.3 Medium
- epiphyt form blockWordPress Form Block Plugin <= 1.5.5 - Arbitrary File Upload Vulnerability9.0 Critical
- made i.t. formsWordPress Forms <= 2.9.0 - Arbitrary File Upload Vulnerability9.9 Critical
- statamic cmsUmbraco CMS < 4.7.1 codeEditorSave.asmx RCE9.3 Critical
- php volunteer management volunteer managementPHP Volunteer Management System 1.0.2 Arbitrary File Upload8.7 High
- ivanti avalancheIncomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a...7.2 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX...5.1 Medium
- auxilium ratemypetAuxilium RateMyPet Arbitrary File Upload RCE9.3 Critical
- Show moreLoading…