cve.bz

CWE-434: Unrestricted Upload of File with Dangerous Type, page 62

Filter

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

What the weakness is: CWE-434 at MITRE. OWASP Top 10: A06:2025 Insecure Design

Related attack patterns (CAPEC): 1
  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-434, as MITRE names them. Credits.

Ask an AI about CWE-434

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-434: Unrestricted Upload of File with Dangerous Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/434.html and https://cve.bz/cve/cwe/434?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2023-0257EPSS 0.6%

    A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form…

  2. 8.8CVE-2022-46610EPSS 18%

    72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

  3. 7.2CVE-2022-44036EPSS 1.2%

    In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execution. NOTE: the vendor's position is that this is "very obviously a feature not an issue a…

  4. 8.8CVE-2022-43436EPSS 0.9%

    The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service.

  5. 8.8CVE-2022-48194ExploitEPSS 33%

    TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.

  6. 7.2CVE-2022-45427EPSS 0.7%

    Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can upload arbitrary files.

  7. 7.2CVE-2022-4732EPSS 38%

    Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.

  8. 9.8CVE-2022-45896EPSS 1.2%

    Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload2.ashx can be used, or Ajax.asmx/ProcessUpload2. This leads to remote code execution.

  9. 8.8CVE-2022-4665EPSS 0.8%

    Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.

  10. 9.8CVE-2022-46493EPSS 0.8%

    Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.

  11. 7.8CVE-2022-45415EPSS 0.2%

    When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with that extension, leading to possible system compromise if the downloaded file was later ran…

  12. 8.8CVE-2022-34483EPSS 0.7%

    An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious …

  13. 8.8CVE-2022-34482EPSS 0.7%

    An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious …

  14. 7.8CVE-2022-0517EPSS 0.2%

    Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN < 2.7.1.

  15. 9.8CVE-2022-46102EPSS 0.8%

    AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php

  16. 9.8CVE-2022-45966EPSS 0.8%

    here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.

  17. 9.8CVE-2022-46020ExploitEPSS 39%

    WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.

  18. 7.2CVE-2022-46135EPSS 1.2%

    In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.

  19. 7.8CVE-2022-45338EPSS 0.2%

    An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267SP13 and Exact Synergy Enterprise 500 before 500SP6 allows attackers to execute arbitrary code via a crafted SVG file.

  20. 8.8CVE-2020-20588EPSS 1.3%

    File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.

  21. 8.8CVE-2022-4506EPSS 1.1%

    Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2.

  22. 8.8CVE-2022-41267EPSS 0.9%

    SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Business Objects server at the operating system level, enabling the attacker to take full control of the…

  23. 7.2CVE-2022-45275EPSS 15%

    An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=save_settings of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

  24. 7.5CVE-2022-3912EPSS 0.8%

    The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP f…

  25. 8.8CVE-2022-45968EPSS 1.0%

    Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protected one).

  26. 8.8CVE-2022-45759EPSS 0.6%

    SENS v1.0 has a file upload vulnerability.

  27. 7.8CVE-2022-46828EPSS 0.3%

    In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.

  28. 7.2CVE-2022-45009EPSS 1.1%

    Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/classes/SystemSettings.php?f=update_settings. This vulnerability allows attackers to execute arbitrary code via a crafted…

  29. 9.8CVE-2022-45359EPSS 14%

    Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.

  30. 8.8CVE-2022-45548EPSS 0.8%

    AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.

  31. 8.8CVE-2022-44289EPSS 3.1%

    Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.

  32. 7.2CVE-2022-45912EPSS 1.2%

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUploader by an authenticated admin user. An authenticated admin user can upload files through the ClientUploader utility, a…

  33. 8.8CVE-2022-45771EPSS 1.9%

    An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file.

  34. 9.8CVE-2022-4276EPSS 0.6%

    A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument id_phot…

  35. 9.8CVE-2022-4273EPSS 0.8%

    A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the file /hrm/controller/employee.php of the component Content-Type Han…

  36. 9.8CVE-2022-4272EPSS 0.8%

    A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestr…

  37. 9.8CVE-2022-36431EPSS 1.2%

    An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary code via a crafted JSP file. Issue fixed in version 7.9.6.1.

  38. 9.8CVE-2022-4232EPSS 0.5%

    A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the …

  39. 9.8CVE-2022-44354EPSS 1.7%

    SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.

  40. 8.8CVE-2022-38140EPSS 0.8%

    Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress.

  41. 9.8CVE-2022-44401EPSS 0.9%

    Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.

  42. 9.8CVE-2022-44400EPSS 1.2%

    Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.

  43. 9.8CVE-2022-45476EPSS 1.1%

    Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for download. This is possible because the application is vulnerable to insecure file upload.

  44. 9.8CVE-2022-41705EPSS 2.0%

    Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.

  45. 7.2CVE-2022-45039EPSS 1.1%

    An arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary code via a crafted PHP file.

  46. 8.8CVE-2021-43258ExploitEPSS 12%

    CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requires authenticated access tot he ChurchInfo application. Once authenticated, a user can add names to their cart, and comp…

  47. 9.8CVE-2020-23591EPSS 1.2%

    A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrary files through " /mgm_dev_upgrade.asp " which can "delete every file for Denial of Service (using 'rm…

  48. 7.8CVE-2022-2791EPSS 0.2%

    Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected PLC.

  49. 7.2CVE-2022-30529EPSS 1.0%

    File upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to upload arbitrary files via /system/application/libs/js/tinymce/plugins/filemanager/dialog.php and /system/applicati…

  50. 9.8CVE-2022-42698EPSS 1.0%

    Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress.