CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- xuemian168 kunoKuno is Vulnerable to Stored XSS Attack via SVG File Upload5.4 Medium
- hovanesvn ap backgroundAP Background 3.8.1 - 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload via advParallaxBackAdminSaveSlider Function8.8 High
- ekndev wp dispatcherWP Dispatcher <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- langbot-app langbotLangBot has a cross-directory file upload vulnerability, which could lead to system takeover8.6 High
- markany safepc enterpriseRemote Code Execution in MarkAny SafePC Enterprise8.7 High
- gtone changeflowRemote Code Execution in GTONE ChangeFlow9.4 Critical
auth0/symfonyPackagistAuth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import3.3 Lowauth0/wordpressPackagistAuth0 Wordpress plugin Does Not Properly Handle File Types in Bulk User Import3.3 Lowauth0/loginPackagistlaravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import3.3 Low- auth0 laravel-auth0auth0-PHP: Improper File Type Handling in Bulk User Import3.3 Low
- suisuijiang fioraFiora chat group avatar is vulnerable to XSS via SVG files8.8 High
- polska akademia dostępności pad cmsRemote Code Execution via Unrestricted File Upload in PAD CMS10.0 Critical
- polska akademia dostępności pad cmsRemote Code Execution via Unrestricted File Upload in PAD CMS10.0 Critical
- polska akademia dostępności pad cmsRemote Code Execution via Unrestricted File Upload in PAD CMS10.0 Critical
- patrickposner qyrr – simply and modern qr-code creationQyrr – simply and modern QR-Code creation <= 2.0.7 - Authenticated (Contributor+) Arbitrary File Upload6.4 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates10.0 Critical
- medical informatics engineering enterprise healthMedical Informatics Engineering Enterprise Health arbitrary file upload6.2 Medium
- statamic cms, wanglongcn yifang +1 moreYiFang CMS Backend File.php webUploader unrestricted upload5.1 Medium
- projectworlds online tours and travelsProjectworlds Online Tours and Travels change-image.php unrestricted upload5.1 Medium
- angeljudesuarez open source job portalitsourcecode Open Source Job Portal controller.php unrestricted upload5.3 Medium
- avepoint compliance guardian, docave, perimeter +2 moreUnrestricted uploading of dangerous file types to AvePoint products8.6 High
- harutheme woocommerce designer proWordPress WooCommerce Designer Pro Plugin <= 1.9.24 - Arbitrary File Upload Vulnerability10.0 Critical
- wso2 enterprise integrator, identity server, identity server as key manager +1 more +3 moreAuthenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution6.7 Medium
- gamerz wp-downloadmanagerWP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload7.2 High
- horillaHorilla has Improper Input Sanitization Leading to XSS and Admin Account Takeover7.7 High
- horillaHorilla Stored XSS Vulnerability via File Upload in Reimbursement Panel7.7 High
- talentsys consulting information technology industry inc. inka.netUnrestricted File Upload in TaletSys Inka.Net10.0 Critical
- moomoo product options and price calculation formulas for woocommerce – uni cpo (premium)Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'9.8 Critical
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload9.8 Critical
- invoice ninja 5Authenticated admin RCE in Invoice Ninja8.6 High
- academico-sis academicoacademico-sis academico Profile Picture edit-photo unrestricted upload5.3 Medium
- selleo mentingoSelleo Mentingo Content-Type unrestricted upload5.3 Medium
- selleo mentingoSelleo Mentingo Profile Picture unrestricted upload5.3 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Execution of C:\Program.exe8.6 High
- salzano embed pdf for wpformsEmbed PDF for WPForms <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- No product listedAirsonic-Advanced Playlist Upload unrestricted upload5.3 Medium
- summar software portal del empleadoUnrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado5.3 Medium
- oxygenz clipbucketAn issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit...7.3 High
- akilli commerce software technologies ltd. co. e-commerce websiteitsourcecode E-Commerce Website users.php unrestricted upload5.3 Medium
- akilli commerce software technologies ltd. co. e-commerce websiteitsourcecode E-Commerce Website products.php unrestricted upload5.3 Medium
- janobe online exam form submissionSourceCodester Online Exam Form Submission register.php unrestricted upload6.9 Medium
- kodezen storeengine — complete ecommerce solution with memberships, licensing, affiliates & moreStoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- oscommerceosCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution9.3 Critical
- carmelo computer laboratory systemcode-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload...7.3 High
- by-night smsby-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg...8.8 High
- janobe online student file management systemSourceCodester Online Student File Management System save_file.php unrestricted upload5.3 Medium
- campcodes online job finder systemCampcodes Online Job Finder System applicationform.php unrestricted upload6.9 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software Setting seo_setting.php unrestricted upload5.3 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software user.php unrestricted upload5.3 Medium
- 1000projects online student project report submission and evaluation system1000projects Online Student Project Report Submission and Evaluation System student_controller.php unrestricted upload6.9 Medium
- Show moreLoading…