Unrestricted Upload of File with Dangerous Type
CWE-434
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
We track 2,513 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.9. 28 have been exploited in real attacks.
How this weakness is prevented
- Architecture and Design: Generate a new, unique filename for an uploaded file instead of using the user-supplied filename, so that no external input is used at all.
- Architecture and Design: When the set of acceptable objects, such as filenames or URLs, is limited or known, create a mapping from a set of fixed input values (such as numeric IDs) to the actual filenames or URLs, and reject all other inputs.
- Architecture and Design: Consider storing the uploaded files outside of the web document root entirely. Then, use other mechanisms to deliver the files dynamically.
- Architecture and Design: Define a very limited set of allowable extensions and only generate filenames that end in these extensions. Consider the possibility of XSS (CWE-79) before allowing.html or.htm file types.
- Implementation: Ensure that only one extension is used in the filename. Some web servers, including some versions of Apache, may process files based on inner extensions so that filename.php.gif is fed to the PHP interpreter.
Latest Unrestricted Upload of File with Dangerous Type vulnerabilities
- 7.2 High severity
Online Diagnostic Lab Management System: Unrestricted Upload of File with Dangerous Type
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/createOrder.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
- 7.2 High severity
Online Diagnostic Lab Management System: Unrestricted Upload of File with Dangerous Type
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
- 9.8 Critical severity
Human Resource Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /employeeview.php of the component Image File Handler. The manipulation lea
- 7.2 High severity
Church Management System: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
- 8.8 High severity
Email Marketer: Unrestricted Upload of File with Dangerous Type
Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a /admin/temp/surveys/ URI. NOTE: this issue exists because of an inco
- 9.8 Critical severity
D8s-asns: Unrestricted Upload of File with Dangerous Type
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-xml: Unrestricted Upload of File with Dangerous Type
The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-algorithms: Unrestricted Upload of File with Dangerous Type
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-lists: Unrestricted Upload of File with Dangerous Type
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-ip-addresses: Unrestricted Upload of File with Dangerous Type
The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-asns: Unrestricted Upload of File with Dangerous Type
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-urls: Unrestricted Upload of File with Dangerous Type
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-pdfs: Unrestricted Upload of File with Dangerous Type
The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-utility: Unrestricted Upload of File with Dangerous Type
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-html: Unrestricted Upload of File with Dangerous Type
The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-domains: Unrestricted Upload of File with Dangerous Type
The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-archives: Unrestricted Upload of File with Dangerous Type
The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-json: Unrestricted Upload of File with Dangerous Type
The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-utility: Unrestricted Upload of File with Dangerous Type
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-yaml: Unrestricted Upload of File with Dangerous Type
The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- 7.5 High severity
Web-Based Student Clearance System: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestric
- 7.2 High severity
Online Leave Management System: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
- 7.2 High severity
Backdrop CMS: Unrestricted Upload of File with Dangerous Type
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.
- 7.2 High severity
Online Diagnostic Lab Management System: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
- 8.8 High severity
Frontend File Manager Plugin: Unrestricted Upload of File with Dangerous Type
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achi
- 8.8 High severity
Mojoportal: Unrestricted Upload of File with Dangerous Type
mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file.
- 7.2 High severity
discourse: Unrestricted Upload of File with Dangerous Type
Discourse is an open source discussion platform. In versions prior to 2.8.9 on the `stable` branch and prior to 2.9.0.beta10 on the `beta` and `tests-passed` branches, admins can upload a maliciously crafted Zip or Gzip Tar archive to write files at arbitrary
- 8.8 High severity
Exam Reviewer Management System: Unrestricted Upload of File with Dangerous Type
In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution (RCE).
- 9.8 Critical severity
Product Image Bulk Upload Plugin: Unrestricted Upload of File with Dangerous Type
EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files. Exploiting this vulnerability allows a remote unauthenticated attacker to upload arbitrary files other than image files.
- 7.2 High severity
Zoo Management System: Unrestricted Upload of File with Dangerous Type
Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system.
- 7.2 High severity
Zoo Management System: Unrestricted Upload of File with Dangerous Type
Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system.
- 7.2 High severity
CM Download Manager: Unrestricted Upload of File with Dangerous Type
The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example.
- 9.8 Critical severity
Simple College Website: Unrestricted Upload of File with Dangerous Type
Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function file_put_contents(). This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
- 7.2 High severity
Zoo Management System: Unrestricted Upload of File with Dangerous Type
In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system.
- 9.8 Critical severity
D8s-strings: Unrestricted Upload of File with Dangerous Type
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-pdfs: Unrestricted Upload of File with Dangerous Type
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-python: Unrestricted Upload of File with Dangerous Type
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-xml: Unrestricted Upload of File with Dangerous Type
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-netstrings: Unrestricted Upload of File with Dangerous Type
The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- 9.8 Critical severity
D8s-grammars: Unrestricted Upload of File with Dangerous Type
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.