CWE-434: Unrestricted Upload of File with Dangerous Type, page 73

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

What the weakness is: CWE-434 at MITRE. OWASP Top 10: A06:2025 Insecure Design

1. 8.8CVE-2021-20130EPSS 33%2021-10-13

   ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface.

2. 9.8CVE-2021-20125EPSS 3.9%2021-10-13

   An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek VigorConnect 1.6.0-B3. An unauthenticated attacker could leverage this vulnerability to upload files t…

3. 7.2CVE-2021-40189EPSS 1.8%2021-10-11

   PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.

4. 7.2CVE-2021-40188EPSS 1.3%2021-10-11

   PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability. The File Manager function in admin panel does not filter all PHP extensions such as ".php, .php7, .phtml, .php5, ...". An attacker can upload a malicious file and ex…

5. 8.8CVE-2021-39317EPSS 1.7%2021-10-11

   A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callbac…

6. 8.8CVE-2021-41919EPSS 2.4%2021-10-08

   webTareas version 2.4 and earlier allows an authenticated user to arbitrarily upload potentially dangerous files without restrictions. This is working by adding or replacing a personal profile picture. The affected endpoint is /includes/up…

7. 9.8CVE-2021-41566EPSS 2.0%2021-10-08

   The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arbitrary code without logging in.

8. 9.8CVE-2021-37931EPSS 9.5%2021-10-07

   Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

9. 9.8CVE-2021-37930EPSS 9.5%2021-10-07

   Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

10. 9.8CVE-2021-37929EPSS 9.5%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

11. 9.8CVE-2021-37928EPSS 9.5%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

12. 9.8CVE-2021-37926EPSS 74%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

13. 9.8CVE-2021-37924EPSS 11%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

14. 9.8CVE-2021-37923EPSS 11%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

15. 9.8CVE-2021-37921EPSS 11%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

16. 9.8CVE-2021-37920EPSS 11%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

17. 9.8CVE-2021-37919EPSS 11%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

18. 9.8CVE-2021-37918EPSS 74%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

19. 9.8CVE-2021-37762EPSS 8.1%2021-10-07

    Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution.

20. 9.8CVE-2021-3832EPSS 2.3%2021-10-07

    Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload() function in order to exploit the vulnerability.

21. 7.5CVE-2021-40324EPSS 69%2021-10-04

    Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

22. 9.8CVE-2021-41290EPSS 2.3%2021-09-30

    ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to exe…

23. 7.5CVE-2021-37105EPSS 0.7%2021-09-28

    There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious fil…

24. 6.5CVE-2020-20691EPSS 0.9%2021-09-27

    An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files.

25. 9.8CVE-2021-37761EPSS 9.5%2021-09-27

    Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution.

26. 9.8CVE-2021-37539EPSS 93%2021-09-27

    Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.

27. 9.8CVE-2021-26794EPSS 1.6%2021-09-23

    Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.

28. 8.8CVE-2021-37741EPSS 2.7%2021-09-21

    ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities.

29. 7.2CVE-2021-24663EPSS 1.5%2021-09-20

    The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitrary file like PHP, leading to RCE

30. 7.2CVE-2020-21483EPSS 1.7%2021-09-15

    An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg file which is later changed to a PHP file.

31. 7.2CVE-2020-21481EPSS 1.7%2021-09-15

    An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file.

32. 9.8CVE-2020-21322EPSS 1.8%2021-09-15

    An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.

33. 8.8CVE-2021-33698EPSS 1.1%2021-09-15

    SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation.

34. 8.8CVE-2021-40845EPSS 4.7%2021-09-15

    The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allow…

35. 9.8CVE-2021-36582EPSS 1.5%2021-09-14

    In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server. The files are uploaded to /Content/Template/root/reverse-shell.aspx and can …

36. 9.8CVE-2021-36581EPSS 1.4%2021-09-14

    Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server.

37. 7.8CVE-2020-20672EPSS 0.9%2021-09-13

    An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.

38. 8.8CVE-2020-20670EPSS 1.7%2021-09-13

    An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.

39. 8.8CVE-2021-24620EPSS 0.6%2021-09-13

    The WordPress Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin through 2.2.5 does not check for the uploaded Downloadable Digital product file, allowing any file, such as PHP to be uploaded by an administrator. Fu…

40. 9.8CVE-2021-24493EPSS 2.0%2021-09-13

    The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authenticated user does not have any security measure in place to prevent upload of malicious files, such as PHP, allowing u…

41. 6.8CVE-2021-24490EPSS 0.6%2021-09-13

    The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allow…

42. 9.8CVE-2020-19267EPSS 1.6%2021-09-09

    An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.

43. 9.8CVE-2021-36440EPSS 4.8%2021-09-08

    Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdateController.class.php'.

44. 9.8CVE-2020-19138EPSS 5.7%2021-09-08

    Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component "/src/main/java/com/dotmarketing/filters/CMSFilter.java".

45. 8.8CVE-2021-38841EPSS 4.1%2021-09-07

    Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the system_info page in classes/SystemSettings.php with an update_settings action.

46. 9.8CVE-2021-40531EPSS 33%2021-09-06

    Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by Comma…

47. 7.5CVE-2021-40524ExploitEPSS 4.3%2021-09-05

    In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero t…

48. 7.2CVE-2021-36042EPSS 2.5%2021-09-01

    Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve…

49. 7.2CVE-2021-36040EPSS 2.9%2021-09-01

    Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to bypass file …

50. 8.8CVE-2021-29907EPSS 1.5%2021-08-31

    IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. IBM X-Force ID: 207633.