cve.bz

CWE-434: Unrestricted Upload of File with Dangerous Type, page 57

Filter

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

What the weakness is: CWE-434 at MITRE. OWASP Top 10: A06:2025 Insecure Design

Related attack patterns (CAPEC): 1
  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-434, as MITRE names them. Credits.

Ask an AI about CWE-434

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-434: Unrestricted Upload of File with Dangerous Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/434.html and https://cve.bz/cve/cwe/434?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2023-37152EPSS 2.0%

    Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability.

  2. 8.8CVE-2023-34193EPSS 1.2%

    File Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute arbitrary code and obtain sensitive information via the ClientUploader function.

  3. 8.8CVE-2023-36969ExploitEPSS 49%

    CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.

  4. 8.8CVE-2020-21861EPSS 0.7%

    File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.

  5. 5.4CVE-2023-36809EPSS 0.7%

    Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases, etc. Versions of Kiwi TCMS prior to 12.5 had introduced changes which were meant to serve all uploaded files as plain text in or…

  6. 7.8CVE-2023-37208EPSS 0.2%

    When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

  7. 9.8CVE-2023-3504EPSS 0.5%

    A vulnerability was found in SmartWeb Infotech Job Board 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /settings/account of the component My Profile Page. The manipulation of the argument …

  8. 8.8CVE-2023-3503EPSS 0.9%

    A vulnerability has been found in SourceCodester Shopping Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation leads to unrestricted upload. The…

  9. 9.8CVE-2020-22153EPSS 1.5%

    File Upload vulnerability in FUEL-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted .php file to the upload parameter in the navigation function.

  10. 9.8CVE-2020-22151EPSS 1.5%

    Permissions vulnerability in Fuel-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted zip file to the assests parameter of the upload function.

  11. 8.8CVE-2023-3491EPSS 0.9%

    Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3.

  12. 7.2CVE-2023-32621EPSS 0.7%

    WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege.

  13. 9.8CVE-2020-18432EPSS 0.9%

    File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges.

  14. 9.8CVE-2023-34738EPSS 0.8%

    Chemex through 3.7.1 is vulnerable to arbitrary file upload.

  15. 7.2CVE-2023-34736EPSS 0.8%

    Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload.

  16. 9.8CVE-2022-44276EPSS 2.3%

    In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.

  17. 6.5CVE-2023-32526EPSS 2.0%

    Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute…

  18. 6.5CVE-2023-32525EPSS 2.0%

    Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute…

  19. 9.8CVE-2023-33404EPSS 26%

    An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code.

  20. 8.8CVE-2020-20210EPSS 1.3%

    Bludit 3.9.2 is vulnerable to Remote Code Execution (RCE) via /admin/ajax/upload-images.

  21. 8.8CVE-2023-36630EPSS 0.9%

    In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.

  22. 7.2CVE-2023-1721EPSS 1.0%

    Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

  23. 7.2CVE-2023-27083EPSS 1.2%

    An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code via manage file functionality.

  24. 9.8CVE-2023-36097EPSS 0.9%

    funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.

  25. 9.8CVE-2020-21489EPSS 1.3%

    File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component.

  26. 9.8CVE-2020-21474EPSS 1.2%

    File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir=rsd parameter.

  27. 8.8CVE-2020-21325EPSS 1.3%

    An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the function\common.func.php file.

  28. 9.8CVE-2020-21174EPSS 1.3%

    File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.

  29. 7.2CVE-2020-20969ExploitEPSS 6.2%

    File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_restoreitem.php file.

  30. 7.2CVE-2020-20919EPSS 1.3%

    File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information via the theme.php file.

  31. 9.8CVE-2020-20735EPSS 1.1%

    File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.php parameter.

  32. 9.8CVE-2020-20718EPSS 1.3%

    File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter.

  33. 8.8CVE-2020-20067EPSS 1.3%

    File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parameter.

  34. 8.8CVE-2023-35808EPSS 1.3%

    An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnerability has been identified in the Notes module. By using crafted requests, custom PHP code can be injected and executed…

  35. 8.8CVE-2023-3295EPSS 1.3%

    The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the file manager functionality in versions up to, and including, 1…

  36. 6.5CVE-2023-34660EPSS 0.6%

    jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.

  37. 5.4CVE-2023-34845EPSS 0.8%

    Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the p…

  38. 9.8CVE-2023-32753EPSS 0.9%

    OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands…

  39. 9.8CVE-2023-32752EPSS 0.9%

    L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable f…

  40. 6.1CVE-2023-34833EPSS 0.5%

    An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file.

  41. 8.8CVE-2023-3274EPSS 0.9%

    A vulnerability classified as critical has been found in code-projects Supplier Management System 1.0. Affected is an unknown function of the file btn_functions.php of the component Picture Handler. The manipulation leads to unrestricted u…

  42. 7.2CVE-2022-33166EPSS 0.8%

    IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 228586.

  43. 9.8CVE-2023-34747EPSS 20%

    File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.

  44. 9.8CVE-2023-34944EPSS 1.1%

    An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file.

  45. 9.8CVE-2023-31541EPSS 1.4%

    A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.

  46. 9.8CVE-2023-3049EPSS 3.7%

    Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before 15.

  47. 8.8CVE-2023-33253EPSS 2.5%

    LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient …

  48. 5.4CVE-2023-3187ExploitEPSS 2.6%

    A vulnerability, which was classified as critical, has been found in PHPGurukul Teachers Record Management System 1.0. Affected by this issue is some unknown functionality of the file /changeimage.php of the component Profile Picture Handl…

  49. 9.9CVE-2023-27881EPSS 0.7%

    A user could use the “Upload Resource” functionality to upload files to any location on the disk.

  50. 8.8CVE-2023-33498EPSS 0.7%

    alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.