CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- intel computing improvement programUnrestricted upload of file with dangerous type for some Intel(R) CIP software before version...2.0 Low
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypass8.8 High
- kddiwebcommunications wp移行専用プラグイン for cpiWP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Upload9.8 Critical
- sap se netweaver application server for abap (migration workbench)Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench)2.7 Low
- employee records system records system, skittles employee records system +1 moreEmployee Records System v1.0 Arbitrary File Upload RCE9.3 Critical
- hundred plus eip plusHundred Plus｜EIP Plus - Arbitrary File Uplaod8.6 High
- cmsmadesimple file managerAn authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple...7.2 High
- alexreservations alex reservations: smart restaurant bookingAlex Reservations: Smart Restaurant Booking <= 2.2.3 - Authenticated (Admin+) Arbitrary File Upload7.2 High
- getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emailsMail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload7.2 High
- burhandodhy smart auto upload images – import external imagesSmart Auto Upload Images <= 1.2.0 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- projectworlds online notes sharing platformprojectworlds Online Notes Sharing Platform userprofile.php unrestricted upload5.3 Medium
- monsta limited of new zealand ftp, monstaftp monsta ftp +1 moreMonsta FTP <= 2.11 Unauthenticated Arbitrary File Upload9.3 Critical
- gravity forms formsGravity Forms <= 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'9.8 Critical
- matiasdesuu thinkdashboardThinkDashboard: Arbitrary File Upload vulnerability in the Backup Import Feature5.3 Medium
- kingaddons.com king addons for elementorWordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability10.0 Critical
- rometheme rtmkitWordPress RTMKit plugin <= 1.6.5 - Arbitrary File Upload vulnerability9.9 Critical
- case-themes case addonsWordPress Case Addons plugin < 1.3.0 - Arbitrary File Upload vulnerability9.9 Critical
- hogash kallyasWordPress Kallyas theme <= 4.22.0 - Arbitrary File Upload vulnerability9.9 Critical
- plugify support ticket system for woocommerce (premium)WordPress Support Ticket System for WooCommerce plugin <= 2.0.7 - Arbitrary File Upload vulnerability10.0 Critical
- addify custom user registration fields for woocommerceWordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vulnerability10.0 Critical
- vito peleg atarimWordPress Atarim plugin <= 4.2.1 - Arbitrary File Upload vulnerability4.8 Medium
- helmut wandl advanced settingsWordPress Advanced Settings Plugin <= 3.1.1 - Arbitrary File Upload Vulnerability9.1 Critical
- borisolhor drop uploader for cf7 - drag&drop file uploader addonWordPress Drop Uploader for CF7 - Drag&Drop File Uploader Addon Plugin <= 2.4.1 - Arbitrary File Upload Vulnerability10.0 Critical
- wso2 api control plane, api manager, enterprise integrator +15 more +17 moreAuthenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution8.4 High
- cisco unified contact center expressCisco Unified Contact Center Express Arbitrary File Upload Vulnerability6.5 Medium
- cisco unified contact center expressCisco Unified Contact Center Express Remote Code Execution Vulnerability6.5 Medium
- cisco unified contact center expressCisco Unified Contact Center Express Remote Code Execution Vulnerability9.8 Critical
- wso2 api control plane, api manager, enterprise integrator +6 more +8 moreAuthenticated Arbitrary File Upload in Multiple WSO2 Products via CarbonAppUploader Admin Service Leading to Remote Code Execution6.7 Medium
- kiotviet sync, mykiot kiotviet sync +1 moreKiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload9.8 Critical
- snipeitapp snipe-itSnipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an...9.9 Critical
- fahad mahmood easy upload files during checkoutEasy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload9.8 Critical
- erinmorelli em beer managerEM Beer Manager <= 3.2.3 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- eaton brightlayer software suite (blss)Arbitrary code execution is possible due to improper validation of the file upload functionality...8.3 High
- code-projects simple online hotel reservation systemcode-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload5.1 Medium
- anthonyeden restful content syndicationRESTful Content Syndication 1.1.0 - 1.5.0 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- wpdelicious wp delicious – recipe plugin for food bloggers (formerly delicious recipes)Delicious Recipes <= 1.9.0 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- essekia tablesome table – contact form db – wpforms, cf7, gravity, forminator, fluentTablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload9.8 Critical
- elogELOG file upload stored XSS8.6 High
- nagios xiNagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory8.7 High
- dnnsoftware dotnetnuke, dnn.platform +1 moreDNN Insufficient Access Control - Image Upload allows for Site Content Overwrite10.0 Critical
- dnnsoftware dotnetnuke, dnn.platform +1 moreDNN CKEditor Provider allows unauthenticated upload out-of-the-box4.3 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System addproduct.php unrestricted upload6.9 Medium
- max-3000 maxsite cms, maxsite cms +1 moreMaxSite CMS save-file-ajax.php unrestricted upload5.3 Medium
- max-3000 maxsite cms, maxsite cms +1 moreMaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload5.3 Medium
- yonyou u8 cloudYonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted upload5.3 Medium
- matthewdeaves willow cms, statamic cms +1 moreWillow CMS add unrestricted upload5.1 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System editproduct.php unrestricted upload6.9 Medium
- ashymuzuro full-ecommece-website, muzuro ecommerce system +1 moreashymuzuro Full-Ecommece-Website/Muzuro Ecommerce System Add Product index.php unrestricted upload5.1 Medium
- learnhouseLearnHouse Course Thumbnail courses unrestricted upload5.3 Medium
- bdtask flight booking softwareBdtask Flight Booking Software Package Information package-information unrestricted upload5.3 Medium
- Show moreLoading…