Unrestricted Upload of File with Dangerous Type
CWE-434
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
We track 2,513 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.9. 28 have been exploited in real attacks.
How this weakness is prevented
- Architecture and Design: Generate a new, unique filename for an uploaded file instead of using the user-supplied filename, so that no external input is used at all.
- Architecture and Design: When the set of acceptable objects, such as filenames or URLs, is limited or known, create a mapping from a set of fixed input values (such as numeric IDs) to the actual filenames or URLs, and reject all other inputs.
- Architecture and Design: Consider storing the uploaded files outside of the web document root entirely. Then, use other mechanisms to deliver the files dynamically.
- Architecture and Design: Define a very limited set of allowable extensions and only generate filenames that end in these extensions. Consider the possibility of XSS (CWE-79) before allowing.html or.htm file types.
- Implementation: Ensure that only one extension is used in the filename. Some web servers, including some versions of Apache, may process files based on inner extensions so that filename.php.gif is fed to the PHP interpreter.
Latest Unrestricted Upload of File with Dangerous Type vulnerabilities
- 9.8 Critical severity
Simple and Nice Shopping Cart Script: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The
- 9.8 Critical severity
cms: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to unrestricted upload. The attack may be initiated remotely. T
- 9.8 Critical severity
Simple Music Player: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file save_music.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the at
- 7.2 High severity
QYKCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Meizhou Qingyunke QYKCMS 4.3.0. It has been classified as problematic. This affects an unknown part of the file /admin_system/api.php of the component Update Handler. The manipulation of the argument downurl leads to unrestricted u
- 7.2 High severity
Gadget Works Online Ordering System: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/products/controller.php?action=add of the component Products Handler. The manipulation of
- 8.8 High severity
NETGEAR Nighthawk WiFi6 Router (RAX30): Unrestricted Upload of File with Dangerous Type
When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and po
- 8.8 High severity
Simple Art Gallery: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-2
- 7.2 High severity
Jizhicms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file.
- 9.8 Critical severity
Perfreeblog: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file.
- 7.2 High severity
Experience Manager: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management (CM) server.
- 9.8 Critical severity
Online Pizza Ordering System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function save_menu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The expl
- 9.8 Critical severity
Online Tours & Travels Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as problematic, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/ab.php. The manipulation of the argument img leads to unrestricted upload. It is p
- 8.8 High severity
Auto Featured Image (Auto Post Thumbnail): Unrestricted Upload of File with Dangerous Type
The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.16 includes an AJAX endpoint that allows any user with at least Author privileges to upload arbitrary files, such as PHP files. This is caused by incorrect file extension validation.
- 8.8 High severity
Avantfax: Unrestricted Upload of File with Dangerous Type
A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file.
- 7.2 High severity
115cms: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Guizhou 115cms 4.2. It has been classified as problematic. Affected is an unknown function of the file /admin/content/index. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit h
- 9.8 Critical severity
UCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The
- 7.5 High severity
Zephyr Enterprise: Unrestricted Upload of File with Dangerous Type
SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of service condition.
- 9.8 Critical severity
Onekeyadmin: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.
- 8.8 High severity
ECshop: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit
- 8.8 High severity
ECshop: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionality of the file admin/database.php of the component Backup Database Handler. The manipulation leads to unrestricted upl
- 7.2 High severity
Cisco Secure Email: Unrestricted Upload of File with Dangerous Type
A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gai
- 9.8 Critical severity
Rd3: Unrestricted Upload of File with Dangerous Type
File upload vulnerability in Pro Gamma Instant Developer RD3 22.5 r23, r30, and possibly earlier versions, allows attackers to execute arbitrary code.
- 9.8 Critical severity
Cloudflow: Unrestricted Upload of File with Dangerous Type
Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.
- 8.8 High severity
Best POS Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function save_settings of the file index.php?page=site_settings of the component Image Handler. The manipulation of th
- 9.8 Critical severity
Pharmacy Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The atta
- 9.1 Critical severity
BusinessObjects Business Intelligence Platform…: Unrestricted Upload of File with Dangerous Type
SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. On successful exploitation, attacker can perform operations that
- 9.8 Critical severity
Online Food Ordering System: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file.
- 8.8 High severity
Enable Media Replace: Unrestricted Upload of File with Dangerous Type
The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.
- 9.8 Critical severity
EcShop: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file /ecshop/admin/template.php of the component PHP File Handler. The manipulation leads to unrestricted upload. It is possible to initiate the
- 9.8 Critical severity
Institutional Management Website: Unrestricted Upload of File with Dangerous Type
File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory.
- 9.8 Critical severity
Aapanel Host System: Unrestricted Upload of File with Dangerous Type
Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execute arbitrary code via uploading a crafted PHP file to the virtual host directory of the system.
- 9.8 Critical severity
FastCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has b
- 8.8 High severity
Responsive Filemanager: Unrestricted Upload of File with Dangerous Type
An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanism and upload a crafted PHP file, leading to arbitrary code execution.
- 8.8 High severity
Nosh Chartingsystem: Unrestricted Upload of File with Dangerous Type
NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. This may allow attackers to steal Protected Health Information because the product is for health charti
- 9.8 Critical severity
APC Easy UPS Online Monitoring Software: Unrestricted Upload of File with Dangerous Type
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JSP file. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Serve
- 9.1 Critical severity
Trend Micro Apex One: Unrestricted Upload of File with Dangerous Type
A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary fi
- 9.8 Critical severity
Fast Checkin: Unrestricted Upload of File with Dangerous Type
An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files in the web root of the application to gain access to the server via the web shell.
- 9.8 Critical severity
Taocms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php.
- 9.8 Critical severity
Pandora FMS: Improper Limitation of a Pathname to a Restricted Directory
There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that the user has inserted does not contain malicious characteres, but this check is insufficient. An attacker could insert an
- 8.8 High severity
Blog-ssm: Unrestricted Upload of File with Dangerous Type
File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component.