cve.bz

CWE-434: Unrestricted Upload of File with Dangerous Type, page 6

Filter

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

What the weakness is: CWE-434 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-434, as MITRE names them. Credits.

Ask an AI about CWE-434

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-434: Unrestricted Upload of File with Dangerous Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/434.html and https://cve.bz/cve/cwe/434?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2026-18080EPSS 0.9%

    The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the save_attachments() function. This is due to missing…

  2. 8.7CVE-2026-80237EPSS 0.8%

    EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

  3. 9.3CVE-2026-80235EPSS 0.9%

    EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

  4. 8.6CVE-2026-80233EPSS 0.8%

    CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on …

  5. 7.1CVE-2026-80050EPSS 0.3%

    ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to store files with arbitrary extensions. Attackers can initialize chunked uploads, s…

  6. 5.3CVE-2026-55419EPSS 0.5%

    Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the upload_sound method in src/reachy_mini/daemon/app/routers/media.py without au…

  7. 8.6CVE-2026-75496EPSS 1.0%

    Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated attacker with administrative privileges could upload executable …

  8. 9.8CVE-2026-16286EPSS 0.6%

    Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This iss…

  9. 4.8CVE-2026-79670EPSS 0.3%

    Ech0 before 4.4.3 contains a stored cross-site scripting vulnerability in the file upload endpoint that validates Content-Type using only client-supplied headers without server-side inspection. Attackers with admin privileges can upload SV…

  10. 8.8CVE-2026-16601EPSS 1.2%

    The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 2.1.8 via the uploadMedia function. This is due to insuffic…

  11. 7.1CVE-2026-56702EPSS 0.6%

    Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a permissive default extension allowlist. Attackers can uploa…

  12. 9.9CVE-2026-32559EPSS 0.5%

    Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.

  13. 4.8CVE-2026-78337EPSS 0.4%

    Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the create company and update company permissions to execute arbitrary JavaScript in…

  14. 5.5CVE-2026-78245EPSS 0.5%

    A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function move_uploaded_file of the file all_users/register.php of the component User Registration. Executing a manipulation of the argument photo can lead t…

  15. 5.5CVE-2026-78202EPSS 0.5%

    A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote…

  16. 5.1CVE-2026-19852EPSS 0.3%

    NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting.

  17. 9.1CVE-2026-49849EPSS 1.0%

    xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to upload executable files (e.g., .php). By uploading a specially crafted php file, a…

  18. 2.1CVE-2026-77681EPSS 0.4%

    A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The at…

  19. 9.4CVE-2026-2334EPSS 0.7%

    An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload o…

  20. 2.0CVE-2026-76995EPSS 0.4%

    A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_menu. The manipulation of the argument img leads to unrestricted up…

  21. 8.7CVE-2026-64960EPSS 0.6%

    ATutor Gameme module allows users to upload files of any type and extension without restriction. Due to improper handling of file uploads, files are stored in a web-accessible location before their content is validated. An authenticated at…

  22. 9.9CVE-2026-74018EPSS 0.5%

    Subscriber Arbitrary File Upload in Warehouse Cargo <= 2.6.9 versions.

  23. 9.9CVE-2026-74016EPSS 0.5%

    Subscriber Arbitrary File Upload in Smart Cleaning <= 4.8.6 versions.

  24. 9.9CVE-2026-74014EPSS 0.5%

    Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions.

  25. 9.1CVE-2026-66600EPSS 0.5%

    Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions.

  26. 8.6CVE-2026-14946EPSS 0.8%

    A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise.

  27. 7.2CVE-2026-15049EPSS 0.8%

    The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitr…

  28. 2.1CVE-2026-76800EPSS 0.3%

    A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_media_post.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The atta…

  29. 8.7CVE-2026-68899EPSS 0.5%

    Wekan is open source kanban built with Meteor. Prior to 9.90, isFileValid() in models/fileValidation.js used the Unix file command for content-based MIME detection, but detectMimeFromFile() silently returned undefined when that binary was …

  30. 9.0CVE-2026-32475ExploitEPSS 2.0%

    Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

  31. 10.0CVE-2026-75949EPSS 0.4%

    Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3 - Upload/remove accepted a client-controlled root (_path_type could point at the component site/admin trees), did not enfo…

  32. 10.0CVE-2026-74803EPSS 0.4%

    Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbitrary files when the client-supplied Content-Type falls within the image MIME group.

  33. 8.9CVE-2026-73373EPSS 0.6%

    Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution.

  34. 9.8CVE-2026-73996EPSS 0.5%

    Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.

  35. 9.9CVE-2026-66627EPSS 0.5%

    Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion. This issue affects GP Premium: from n/a through 2.5.5.

  36. 9.9CVE-2026-32474EPSS 0.5%

    Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.

  37. 9.9CVE-2026-32463EPSS 0.5%

    Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.

  38. 9.6CVE-2026-28192EPSS 0.4%

    Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.

  39. 2.1CVE-2024-14046EPSS 0.4%

    A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Document Upload Co…

  40. 9.8CVE-2026-15748EPSS 4.1%

    The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in handle_file_upload, wher…

  41. 8.8CVE-2026-65640EPSS 1.9%

    WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: * Imagick and Ghostscript in use on the server * A malicious user with the `upload_fil…

  42. 9.8CVE-2026-67678EPSS 0.8%

    File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code

  43. 8.8CVE-2026-50768EPSS 0.7%

    File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function.

  44. 7.2CVE-2026-16137EPSS 0.7%

    In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writ…

  45. 8.7CVE-2026-74845EPSS 0.9%

    Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on th…

  46. 9.8CVE-2026-16098EPSS 1.2%

    The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSol_handleFileUpload function. This is due to missing validation of the attacker-controlled Conte…

  47. 8.8CVE-2026-14498EPSS 1.0%

    The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.57 via the 'options' parameter parameter. This is due to missing capability check and nonce verification on the wp_aja…

  48. 8.7CVE-2026-74767EPSS 0.4%

    Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforci…

  49. 8.8CVE-2026-18438EPSS 1.3%

    The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.7.1 via the fetch_remote_file function…

  50. 8.8CVE-2026-15965EPSS 1.0%

    The MaxUpload – Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.4.0 via the handle_upload function. This is due to a filename-validati…