CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- codeigniter4CodeIgniter: Uploaded file extension validation bypass in `ext_in` rule9.8 Critical
- başarsoft information technologies inc. rotabanArbitrary File Upload in Basarsoft's Rotaban9.9 Critical
- limatek system inc. limrad nacUnrestricted File Upload in Limatek's LimRAD NAC9.8 Critical
- magazine3 schema & structured data for wp & ampSchema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload9.1 Critical
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp200), siprotec 5 6md85 (cp300) +58 more +60 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 ...6.9 Medium
- apache answerApache Answer: The custom avatar was not properly validated6.5 Medium
- apache answerApache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error6.5 Medium
- No product listedDcat-Admin User Setting upload editorMDUpload unrestricted upload5.1 Medium
- No product listedAn authenticated arbitrary file upload vulnerability in the /api/create-car-image component of...5.4 Medium
- wp travel kit travelscapeWordPress Theme Travelscape 1.0.3 Arbitrary File Upload9.3 Critical
- background-image-cropper background image cropperWordPress Background Image Cropper 1.2 Remote Code Execution9.3 Critical
- cyber-iii student-management-systemKushan2k student-management-system Registration Endpoint RegisterService.php unrestricted upload6.9 Medium
- mdjm event managementMDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter7.2 High
- altium enterprise server, on-prem enterprise server +1 morePath Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write9.4 Critical
- haxtheweb haxcms-phpHAXCMS PHP has a File Upload Validation Bypass8.7 High
- webfactory advanced google recaptchaWP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- haxtheweb haxcms-phpHAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validation8.7 High
- code-projects vehicle management systemcode-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload6.9 Medium
- tittuvarghese collegemanagementsystemtittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload5.3 Medium
- dfir-iris iris-webIRIS has an Insecure File Upload6.3 Medium
- mjperpinosa stumasymjperpinosa stumasy change_profile_image.php unrestricted upload5.3 Medium
- mjperpinosa stumasymjperpinosa stumasy add_post.php unrestricted upload5.3 Medium
- soplanningUnrestricted Upload of File with Dangerous Type in SOPlanning6.4 Medium
- metasoft 美特软件 metacrmMetasoft 美特软件 MetaCRM upload.jsp unrestricted upload5.3 Medium
- bdtask multi-store inventory management systemBdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload5.3 Medium
- simpkh sim-pkhSIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php8.7 High
- sitejo hape pkhHaPe PKH 1.1 Arbitrary File Upload via aksi_foto.php8.7 High
- interinfo dreammakerInterinfo｜DreamMaker - Arbitrary File Upload8.6 High
- interinfo dreammakerInterinfo｜DreamMaker - Arbitrary File Upload9.3 Critical
- No product listedFalco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the...7.3 High
- cssigniterteam gutenbee – gutenberg blocksGutenBee <= 2.20.1 - Authenticated (Author+) Arbitrary File Upload via wp_check_filetype_and_ext Filter8.8 High
- coderevolution crawlomatic multipage scraper post generatorCrawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute8.8 High
- No product listedAn arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of...7.3 High
- wpify woo czechWordPress WPify Woo Czech plugin <= 5.4.1 - Arbitrary File Upload vulnerability9.9 Critical
- sourcecodester simple pos and inventory systemSourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted upload5.3 Medium
- No product listedKLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload6.9 Medium
- yangzongzhuan ruoyi-vueyangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload5.3 Medium
- microsoft azure orbital spatioAzure Orbital Spatio Remote Code Execution Vulnerability10.0 Critical
- 9frontMothra would respect a default value given by a website for HTML file upload forms. An attacker...6.9 Medium
- repute infosystems bookingpress appointment booking proBookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field9.8 Critical
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion9.4 Critical
- gmission web faxRemote Code Execution in Gmission Web FAX8.6 High
- wp swings gift cards for woocommerce proWordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability10.0 Critical
- altium enterprise serverPath Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write9.4 Critical
- prosolution wp clientProSolution WP Client <= 2.0.0 - Unauthenticated Arbitrary File Upload via 'files'9.8 Critical
- budibaseBudibase: Unrestricted Upload of File with Dangerous Type7.6 High
- piotnet forms, piotnetdotcom piotnet forms +1 morePiotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload9.8 Critical
- piotnet addons for elementor proPiotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload9.8 Critical
- metasoft 美特软件 metacrmMetasoft 美特软件 MetaCRM upload3.jsp unrestricted upload6.9 Medium
- heliossolutions hs brand logo sliderWordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload8.7 High
- Show moreLoading…