CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- 1000projects online student project report submission and evaluation system1000projects Online Student Project Report Submission and Evaluation System faculty_controller.php unrestricted upload6.9 Medium
- ceragon networks / siklu communication etherhaul and multihaul series microwave antennasThe rfpiped service on TCP port 555 in Ceragon Networks / Siklu Communication EtherHaul series ...6.5 Medium
- fcba zzm ics-park smart park management system, smart park management system +1 morefcba_zzm ics-park Smart Park Management System FileUploadUtils.java unrestricted upload5.3 Medium
- echarge hardy barth salia plcceCharge Hardy Barth Salia PLCC api.php unrestricted upload6.9 Medium
- sueamcms project sueamcmsFile Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code...9.8 Critical
- audi universal traffic recorder firmwareAn issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite...7.5 High
- wpallimport wp all import – drag & drop import for csv, xml, excel & google sheetsImport any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload7.2 High
- nik00726 responsive filterable portfolioResponsive Filterable Portfolio <= 1.0.24 - Authenticated (Admin+) Arbitrary File Upload7.2 High
- sohamjuhin tourism management systemA Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and...7.2 High
- ivanti endpoint managerInsufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 Security Update 1 and...8.8 High
- ivanti endpoint managerInsufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 Security Update 1 and...8.8 High
- unknown compress & upload, eliehanna compress \& upload +1 moreCompress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload3.8 Low
- No product listedSiempreCMS file_upload.php unrestricted upload6.9 Medium
- labredescefetrj wegiaWeGIA has a bypass for the fix for CVE-2025-22133 - Arbitrary File Upload leads to Remote Code Execution (RCE)10.0 Critical
- dreamstechnologies doccure coreDoccure Core <= 1.5.3 - Unauthenticated Arbitrary File Upload9.8 Critical
- dreamstechnologies doccureDoccure <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software manage_website.php unrestricted upload5.3 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software profile.php unrestricted upload5.3 Medium
- sourcecodester pet management system, mayurik pet grooming management software +1 moreSourceCodester Pet Management System profile.php unrestricted upload5.1 Medium
- n8nN8N's Chat Trigger component is vulnerable to XSS8.8 High
- mondula2016 multi step formMulti Step Form <= 1.7.25 - Authenticated (Admin+) Arbitrary File Upload7.2 High
- creedally bulk featured imageWordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability9.1 Critical
com.vaadin:vaadinMavenVaadin Platform possible file bypass via upload validation on the server-side5.3 Mediumcom.vaadin:vaadin-upload-flowMavenVaadin Flow Components possible file bypass via upload validation on the server-side5.3 Medium- celonis make connectorMake Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- vaadin, vaadin vaadin-upload-flow, flarum framework +2 morePossibility to bypass file upload validation on the server-side5.3 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System submitproperty.php unrestricted upload5.3 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System register.php unrestricted upload5.3 Medium
- cisco evolved programmable network manager (epnm), evolved programmable network manager +1 moreCisco Evolved Programmable Network Manager Arbitrary File Upload Vulnerability4.3 Medium
- codeastro real estate management systemScriptAndTools Real Estate Management System register.php unrestricted upload5.3 Medium
- phpgurukul online shopping portalphpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert...9.1 Critical
- code-projects mobile shop management systemcode-projects Mobile Shop Management System AddNewProduct.php unrestricted upload5.3 Medium
- copeland e3 supervisory controller firmware, copeland lp e3 supervisory control +1 moreStored XSS by uploading a specially crafted floor plan file5.1 Medium
- simSimStudioAI sim HTML File route.ts import unrestricted upload5.3 Medium
- tianti project tianti, xujeff tianti 天梯 +1 morexujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted upload5.3 Medium
- remoteclinic remote clinicRemoteClinic edit-my-profile.php unrestricted upload6.9 Medium
- remoteclinic remote clinicRemoteClinic edit.php unrestricted upload6.9 Medium
- mojoomla school managementWordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability9.9 Critical
- apache friends xamppXAMPP WebDAV PHP Upload Authentication Bypass RCE8.7 High
- contentkeeper technologies web applianceContentKeeper Web Appliance < 125.10 RCE via mimencode10.0 Critical
- sunnet technology co., ltd. corporate training management system, sun.net ehrd ctms +1 moreSUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type6.9 Medium
- labredescefetrj wegiaWeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)10.0 Critical
- booster for woocommerce, pluggabl booster for woocommerce – pdf invoices, abandoned cart, variation swatches & 100+ tools +1 moreBooster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload8.1 High
- paymenterPaymenter Vulnerable to Remote Code Execution via Public File Uploads10.0 Critical
- hcl software bigfix service management (sm)A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)5.4 Medium
- nagios xiNagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCE8.7 High
- add-ons.org drag and drop file upload for elementor formsWordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability10.0 Critical
- dos co., ltd. ss1SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated...9.3 Critical
- dos co., ltd. ss1, ss1 cloud +1 moreSS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated...9.3 Critical
- wp ulike proWP ULike Pro <= 1.9.3 - Unauthenticated Limited Arbitrary File Upload6.1 Medium
- Show moreLoading…