cve.bz

CWE-434: Unrestricted Upload of File with Dangerous Type, page 81

Filter

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

What the weakness is: CWE-434 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-434, as MITRE names them. Credits.

Ask an AI about CWE-434

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-434: Unrestricted Upload of File with Dangerous Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/434.html and https://cve.bz/cve/cwe/434?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2020-10682EPSS 2.0%

    The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1_files[] to admin/moduleinterface.php. The file should be sent as application/octet-stream and contain PHP code (it nee…

  2. 8.8CVE-2019-16066EPSS 2.2%

    An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS 65.0.0 and prior. This allows an attacker to upload malicious files and perform arbitrary code execution on the system.

  3. 9.8CVE-2020-9423EPSS 5.0%

    LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality to add documents. Those documents could then be used for mu…

  4. 7.2CVE-2019-11074EPSS 4.5%

    A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in arbitrary locations with SYSTEM privileges (although not controlling the contents of such files) d…

  5. 6.5CVE-2020-9472EPSS 2.1%

    Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.

  6. 8.8CVE-2020-9471EPSS 2.3%

    Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

  7. 7.2CVE-2020-5844ExploitEPSS 30%

    index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742_FIX_…

  8. 8.8CVE-2020-10557EPSS 1.4%

    An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. Th…

  9. 7.2CVE-2020-10562EPSS 1.5%

    An issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads.

  10. 7.2CVE-2020-10386ExploitEPSS 12%

    admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory.

  11. 9.8CVE-2016-6918EPSS 1.9%

    Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. (

  12. 8.8CVE-2015-7341EPSS 1.1%

    JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.

  13. 8.8CVE-2015-7339EPSS 1.1%

    JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.

  14. 8.8CVE-2020-5256EPSS 2.0%

    BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP pro…

  15. 9.8CVE-2020-10225EPSS 4.3%

    An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP f…

  16. 9.8CVE-2020-10224EPSS 5.5%

    An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PH…

  17. 9.8CVE-2020-9380EPSS 4.0%

    IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script.

  18. 8.8CVE-2018-19798EPSS 3.1%

    Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidents_add.php?submit=1 URI, as demonstrated by the value_Images_1 field, which leads to…

  19. 7.2CVE-2020-8500EPSS 3.5%

    In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the Updater or Extension component. NOTE: The vendor reports that this is intended functionality

  20. 8.8CVE-2018-17058EPSS 1.3%

    An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validat…

  21. 9.8CVE-2016-11020EPSS 2.9%

    Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution.

  22. 6.5CVE-2020-5188EPSS 1.9%

    DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions.

  23. 5.5CVE-2020-9320EPSS 2.9%

    Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suit…

  24. 8.8CVE-2015-0258EPSS 3.8%

    Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .ph…

  25. 4.9CVE-2020-6975EPSS 0.8%

    Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a malicious file to the application.

  26. 9.8CVE-2011-4908ExploitEPSS 56%

    TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.

  27. 9.8CVE-2011-4906ExploitEPSS 9.6%

    Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

  28. 9.8CVE-2013-3684ExploitEPSS 19%

    NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload

  29. 9.8CVE-2013-2057EPSS 2.1%

    YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability

  30. 9.8CVE-2013-0803ExploitEPSS 75%

    A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.

  31. 9.8CVE-2019-20451EPSS 7.7%

    The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by uploading RebootSystem.lnk and requesting /REBOOTSYSTEM or /RESTARTVNC. (Authentication is required but an XML file containin…

  32. 9.8CVE-2014-8739ExploitEPSS 92%

    Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and b…

  33. 8.8CVE-2013-3591ExploitEPSS 43%

    vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability

  34. 8.8CVE-2015-6000ExploitEPSS 40%

    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earlier allows remote authenticated users to execute arbitrary …

  35. 8.8CVE-2011-1597EPSS 1.8%

    OpenVAS Manager v2.0.3 allows plugin remote code execution.

  36. 9.8CVE-2020-6754EPSS 95%

    dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCAT_HOME/webapps/ROOT/assets (which should be a protected directory). Additionally, att…

  37. 9.8CVE-2014-2025EPSS 4.0%

    Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploadin…

  38. 9.8CVE-2020-8440EPSS 2.8%

    controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume.

  39. 9.8CVE-2013-2748ExploitEPSS 13%

    Belkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system.

  40. 8.8CVE-2020-7998EPSS 1.5%

    An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerability is located in the developer path that is accessible and hidden next to the root path. By default, there is no passwo…

  41. 9.8CVE-2013-7390ExploitEPSS 75%

    Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it v…

  42. 9.9CVE-2020-6965EPSS 1.1%

    In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Ve…

  43. 9.8CVE-2012-6649ExploitEPSS 16%

    WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.

  44. 7.2CVE-2019-16514EPSS 4.2%

    An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. The server allows remote code execution. Administrative users could upload an unsigned extension ZIP file containing executable code that is …

  45. 8.8CVE-2013-6358EPSS 3.7%

    PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the module/ directory.

  46. 9.8CVE-2012-5190ExploitEPSS 4.7%

    Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability

  47. 8.8CVE-2020-7246ExploitEPSS 83%

    A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by leveraging a path traversal vulnerability in the users['photop_preview'] d…

  48. 8.8CVE-2019-20385EPSS 1.1%

    The CSV upload feature in /supervisor/procesa_carga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/* content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI.

  49. 5.4CVE-2020-2730EPSS 0.7%

    Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: File Upload). Supported versions that are affected are 2.7.0.0, 2.7.0.1 and 2.8.0.0. Easily exploit…

  50. 5.3CVE-2011-4907EPSS 0.9%

    Joomla! 1.5x through 1.5.12: Missing JEXEC Check