cve.bz

CWE-434: Unrestricted Upload of File with Dangerous Type, page 67

Filter

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

What the weakness is: CWE-434 at MITRE. OWASP Top 10: A06:2025 Insecure Design

Related attack patterns (CAPEC): 1
  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-434, as MITRE names them. Credits.

Ask an AI about CWE-434

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-434: Unrestricted Upload of File with Dangerous Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/434.html and https://cve.bz/cve/cwe/434?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2022-31362EPSS 18%

    Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

  2. 9.8CVE-2021-40954EPSS 1.8%

    Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.

  3. 9.8CVE-2022-31374EPSS 2.4%

    An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.

  4. 9.8CVE-2022-2128EPSS 2.9%

    Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4.

  5. 7.2CVE-2022-1939EPSS 1.4%

    The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to

  6. 8.8CVE-2017-20063EPSS 0.9%

    A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of the component File Upload. The manipulation leads to improper privilege managem…

  7. 8.8CVE-2022-2111EPSS 1.2%

    Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2.

  8. 4.8CVE-2021-41421EPSS 0.5%

    A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel.

  9. 7.2CVE-2022-32433EPSS 1.5%

    itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/all_teacher.php.

  10. 9.8CVE-2021-40940EPSS 1.7%

    Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.

  11. 9.8CVE-2021-42675EPSS 2.5%

    Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.

  12. 6.5CVE-2022-31041EPSS 0.8%

    Open Forms is an application for creating and publishing smart forms. Open Forms supports file uploads as one of the form field types. These fields can be configured to allow only certain file extensions to be uploaded by end users (e.g. o…

  13. 7.2CVE-2022-0863EPSS 24%

    The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

  14. 9.8CVE-2017-20021EPSS 1.0%

    A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unknown part of the component File Upload. The manipulation leads to privilege escalation. It is possible to initiate the a…

  15. 6.7CVE-2021-35532EPSS 0.2%

    A vulnerability exists in the file upload validation part of Hitachi Energy TXpert Hub CoreTec 4 product. The vulnerability allows an attacker or malicious agent who manages to gain access to the system and obtain an account with sufficien…

  16. 7.2CVE-2022-30860EPSS 25%

    FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel.

  17. 9.8CVE-2022-32019EPSS 2.6%

    Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=save_car.

  18. 8.8CVE-2021-45982EPSS 1.0%

    NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.

  19. 8.8CVE-2022-30822EPSS 1.2%

    In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_profile.php" file.

  20. 8.8CVE-2022-30821EPSS 1.2%

    In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "package_edit.php" file.

  21. 8.8CVE-2022-30820EPSS 1.2%

    In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_edit.php" file.

  22. 8.8CVE-2022-30819EPSS 1.2%

    In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photos_edit.php" file.

  23. 9.8CVE-2022-30808EPSS 17%

    elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.

  24. 9.8CVE-2022-30506EPSS 2.7%

    An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.

  25. 9.8CVE-2022-30423EPSS 1.9%

    Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.

  26. 8.8CVE-2022-29725EPSS 1.5%

    An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file.

  27. 8.8CVE-2022-29624EPSS 1.3%

    An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file.

  28. 7.5CVE-2022-24581EPSS 1.0%

    ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose the username and password ha…

  29. 9.8CVE-2022-24239EPSS 1.1%

    ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.

  30. 7.5CVE-2021-33615EPSS 1.4%

    RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type.

  31. 9.8CVE-2021-26634EPSS 1.4%

    SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attacker…

  32. 7.8CVE-2022-29637EPSS 0.9%

    An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.

  33. 9.8CVE-2022-29632EPSS 17%

    An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file.

  34. 7.2CVE-2022-29651EPSS 1.6%

    An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

  35. 9.8CVE-2021-42654EPSS 1.8%

    SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.

  36. 7.2CVE-2022-1837EPSS 1.3%

    A vulnerability was found in Home Clean Services Management System 1.0. It has been rated as critical. Affected by this issue is register.php?link=registerand. The manipulation with the input <?php phpinfo();?> leads to code execution. The…

  37. 5.4CVE-2022-1811EPSS 0.8%

    Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.

  38. 8.0CVE-2022-1752EPSS 1.9%

    Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.

  39. 9.8CVE-2022-30887EPSS 26%

    Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted image fil…

  40. 9.8CVE-2022-28104EPSS 1.9%

    Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability.

  41. 9.8CVE-2022-28927EPSS 34%

    A remote code execution (RCE) vulnerability in Subconverter v0.7.2 allows attackers to execute arbitrary code via crafted config and url parameters.

  42. 7.2CVE-2021-41938EPSS 1.1%

    An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations.

  43. 6.5CVE-2022-22482EPSS 1.0%

    IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977.

  44. 7.2CVE-2022-30007EPSS 1.0%

    GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can edit any template content and then rename to PHP suffix file, after calling PHP file can control the server.

  45. 7.2CVE-2022-1409EPSS 1.5%

    The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators to upload PHP files disguised as images and containing malicious PHP code

  46. 8.8CVE-2022-1103ExploitEPSS 16%

    The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE

  47. 7.2CVE-2021-25119EPSS 1.5%

    The AGIL WordPress plugin through 1.0 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE

  48. 7.8CVE-2022-29623EPSS 1.4%

    An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report.

  49. 9.8CVE-2022-29622EPSS 3.4%

    An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some third parties dispute this issue because the product has common use cases in which uploading arbitrar…

  50. 9.8CVE-2022-29354EPSS 2.6%

    An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file.