CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- phpgurukul online course registrationPHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload5.3 Medium
- jackying h-ui.adminjackying H-ui.admin preview.php unrestricted upload6.9 Medium
- empiresoft empirecmsEmpireSoft EmpireCMS connect.php CheckSaveTranFiletype unrestricted upload5.3 Medium
- wang.market wangmarketxnx3 wangmarket XML File uploadImage.do uploadImage unrestricted upload5.1 Medium
- campcodes school file management systemcampcodes School File Management System save_file.php unrestricted upload5.3 Medium
- esri arcgis serverUnvalidated File Upload vulnerability in ArcGIS Server.5.6 Medium
- esri arcgis serverUnvalidated File Upload vulnerability in ArcGIS Server.5.6 Medium
- newbee-ltd newbee-mall-plusnewbee-mall-plus Product Information Edit UploadController.java upload unrestricted upload5.1 Medium
- biggidroid simple php cmsBiggiDroid Simple PHP CMS Site Logo edit.php unrestricted upload5.1 Medium
- romancode mapsvgWordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability9.9 Critical
- code-projects college notes uploading systemcode-projects College Notes Uploading System userprofile.php unrestricted upload5.3 Medium
- com.ritense.valtimo webPriority - CWE-434 Unrestricted Upload of File with Dangerous Type8.8 High
- anirbandutta news-buzz, anirbandutta9 content management system +1 morecode-projects/anirbandutta9 Content Management System/News-Buzz editposts.php unrestricted upload5.1 Medium
- welltend bpmflowwebkitWELLTEND TECHNOLOGY｜ BPMFlowWebkit - Arbitrary File Upload9.3 Critical
- sun.net wmproSunnet｜WMPro - Arbitrary File Upload9.3 Critical
- smartertools smartermailUpload Arbitrary Files10.0 Critical
- innorix wpUnrestricted File Upload and RCE in Innorix WP8.5 High
- machsol machpanelFile upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell.9.8 Critical
- vvveb vvvebjsgivanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.9.8 Critical
- vvveb vvvebjsgivanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.9.8 Critical
- h-moses moga-mallh-moses moga-mall PmsProductController.java addProduct unrestricted upload5.3 Medium
- jackq xcmsjackq XCMS Backend ProductImageController.class.php upload unrestricted upload5.1 Medium
- jackq xcmsjackq XCMS upload.php unrestricted upload6.9 Medium
- echo call center services trade and industry inc. specto cmArbitrary File Upload in EchoCCS's Specto CM8.8 High
- code-projects student file management systemcode-projects Student File Management System save_file.php unrestricted upload5.3 Medium
- cadmium-cms cadmium cmsCadmium CMS has a background arbitrary file upload vulnerability9.8 Critical
- projectsendProjectSend r1605 Remote Code Execution via File Extension Manipulation8.7 High
- luiswang webtareasWebTareas 2.4 Authenticated Remote Code Execution via File Upload8.7 High
- 1000mz chestnutcmsliweiyi ChestnutCMS Filename upload FilenameUtils.getExtension unrestricted upload5.3 Medium
- frappe, frappe erpnext +1 moreAn arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0...9.6 Critical
- umbraco cmsUmbraco CMS has an arbitrary file upload vulnerability10.0 Critical
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload8.1 High
- snowray file uploader for woocommerceFile Uploader for WooCommerce <= 1.0.3 - Unauthenticated Arbitrary File Upload via add-image-data9.8 Critical
- innovastudio wysiwyg editorInnovaStudio WYSIWYG Editor 5.4 Unrestricted File Upload via Filename Manipulation9.3 Critical
- altervista flatnuxFlatnux 2021-03.25 Authenticated File Upload Remote Code Execution8.7 High
- dotclearDotclear 2.25.3 Authenticated Remote Code Execution via File Upload8.7 High
- turms-im turmsTurms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation...5.3 Medium
- weblateWeblate has git config file overwrite vulnerability that leads to remote code execution9.1 Critical
- advantech webaccess/scada, webaccess\/scada +1 moreAdvantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type8.7 High
- leefish file thingieFile Thingie 2.5.7 Authenticated Arbitrary File Upload Remote Code Execution9.4 Critical
- kentico xperienceKentico Xperience <= 12.0.29 MVC Forms Unrestricted File Upload8.7 High
- lerouxyxchire client database management systemSourceCodester Client Database Management System Leads Generation user_leads.php unrestricted upload5.3 Medium
- cozmoslabs wp webhooksWordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File Upload vulnerability9.0 Critical
- stylemixthemes motorsWordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerability9.9 Critical
- redefiningtheweb wordpress contact form 7 pdf, google sheet & databaseWordPress WordPress Contact Form 7 PDF, Google Sheet & Database plugin <= 3.0.0 - Arbitrary File Upload vulnerability9.9 Critical
- s9y serendipitySerendipity 2.4.0 Authenticated Remote Code Execution via File Upload8.7 High
- ulicmsUliCMS 2023.1-sniffing-vicuna Remote Code Execution via Avatar Upload8.7 High
- tinywebgalleryTinyWebGallery v2.5 Remote Code Execution via Unrestricted File Upload9.3 Critical
- sitemagic cms, sitemagiccms +1 moreSitemagicCMS 4.4.3 Remote Code Execution via Unrestricted File Upload8.7 High
- churchcrm, churchcrm crm +1 moreChurchCRM vulnerable to RCE with database restore functionality9.1 Critical
- Show moreLoading…