CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- bdtask flight booking softwareBdtask Flight Booking Software Deposit deposit unrestricted upload5.3 Medium
- ajayrandhawa user-management-php-mysqlajayrandhawa User-Management-PHP-MYSQL User Management edit-user.php unrestricted upload5.1 Medium
- edgarrojas aio forms – craft complex forms easilyAIO Forms <= 1.3.18 - Authenticated (Admin+) Arbitrary File Upload via Zip Import7.2 High
- jma plugins woocommerce designer proWooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload9.8 Critical
- perfree perfreeblogPerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function7.6 High
- perfree perfreeblogPerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function7.6 High
- 7oroof medcityWordPress Medcity theme < 1.1.9 - Arbitrary File Upload vulnerability10.0 Critical
- gesundheit bewegt gmbh zippyWordPress Zippy plugin <= 1.7.0 - Arbitrary File Upload vulnerability9.1 Critical
- cmssuperheroes wastiaWordPress Wastia theme < 1.1.3 - Arbitrary File Upload vulnerability10.0 Critical
- cmssuperheroes clanoraWordPress Clanora theme < 1.3.1 - Arbitrary File Upload vulnerability10.0 Critical
- daicuodaicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feature.6.5 Medium
- qdocs smart schoolQDocs Smart School Management System 7.1 allows authenticated users with roles such as ...7.2 High
- galaxy software services vitals espGalaxy Software Services Vitals ESP Forum Module - Unrestricted Upload of File with Dangerous Type9.3 Critical
- excellent infotek document management systemExcellent Infotek｜Document Management System - Arbitrary File Upload9.3 Critical
- tastyigniterTastyIgniter vulnerable to Cross-Site Scripting8.8 High
- themeisle ppom – product addons & custom fields for woocommercePPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload9.8 Critical
- shenzhen ruiming technology streamax crocus, streamax crocus +1 moreShenzhen Ruiming Technology Streamax Crocus FileDir.do uploadFile unrestricted upload5.3 Medium
- hikvision isecure centerSome versions of Hikvision's iSecure Center Product have an improper file upload control...9.8 Critical
- ascertia signinghubAn arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary...9.8 Critical
- themeinwp demo import kitDemo Import Kit <= 1.1.0 - Authenticated (Admin+) Arbitrary File Upload7.2 High
- ajitdas flex qr code generatorFlex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload9.8 Critical
- geolocationtechnology docodoco store locatorDocoDoco Store Locator <= 1.0.1 - Authenticated (Editor+) Arbitrary File Upload7.2 High
- guangzhou smart software co., ltd. smartbiSmartBI RMIServlet Unrestricted File Upload RCE9.2 Critical
- freepbx endpointmanFreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameter8.6 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write7.2 High
- sap se supplier relationship managementUnrestricted File Upload Vulnerability in SAP Supplier Relationship Management9.0 Critical
- ragic enterprise cloud databaseRagic｜Enterprise Cloud Database - Arbitrary File Upload8.6 High
- oranbyte school management systemProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload6.9 Medium
- oranbyte school management systemProjectsAndPrograms School Management System uploadNotes.php unrestricted upload6.9 Medium
- oranbyte school management systemProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload6.9 Medium
- oranbyte school management systemProjectsAndPrograms School Management System createNotice.php unrestricted upload6.9 Medium
- oranbyte school management systemProjectsAndPrograms School Management System editNotes.php unrestricted upload6.9 Medium
- nextcloud flowTotal.js Flow SVG File unrestricted upload5.1 Medium
- ovatheme events managerOvatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload9.8 Critical
- newforma project centerNewforma Info Exchange (NIX) insecure file upload8.7 High
- code-projects voting systemcode-projects Voting System voters_add.php unrestricted upload5.1 Medium
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System manage_website.php unrestricted upload5.1 Medium
- jhumanj opnformJhumanJ OpnForm answer unrestricted upload5.3 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System edit_book.php unrestricted upload5.3 Medium
- campcodes advanced online voting management system, advanced online voting system +1 moreCampcodes Advanced Online Voting Management System voters_add.php unrestricted upload5.3 Medium
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System Profile profile.php unrestricted upload5.3 Medium
- code-projects online hotel reservation systemcode-projects Online Hotel Reservation System addslideexec.php unrestricted upload5.3 Medium
- code-projects online hotel reservation systemcode-projects Online Hotel Reservation System addgalleryexec.php unrestricted upload5.3 Medium
- code-projects online hotel reservation systemcode-projects Online Hotel Reservation System addexec.php unrestricted upload5.3 Medium
- code-projects online hotel reservation systemcode-projects Online Hotel Reservation System editpicexec.php unrestricted upload5.3 Medium
- code-projects student crud operation, crud operation system +1 morecode-projects Student Crud Operation Add Student Page/Edit Student add.php move_uploaded_file unrestricted upload6.9 Medium
- xuemian168 kunoKuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload5.1 Medium
- flowiseai flowiseFlowiseAI/Flosise has File Upload vulnerability8.3 High
- zhuimengshaonian wisdom-educationzhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload5.3 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 uploadWxFile.do unrestricted upload6.9 Medium
- Show moreLoading…