CWE-434 · Unrestricted Upload of File with Dangerous Type (page 17)
Page 17 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-51152 | High | 7.2 | 2024-11-08 | File Upload vulnerability in Laravel CMS v.1.4.7 and before allows a remote attacker to execute arbitrary code via the shell.php a component. |
CVE-2024-11000 | Medium | 4.7 | 2024-11-08 | A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2024-10999 | Medium | 4.7 | 2024-11-08 | A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /aboutadd… |
CVE-2024-10994 | Medium | 6.3 | 2024-11-08 | A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-10993 | Medium | 6.3 | 2024-11-08 | A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /m… |
CVE-2024-10668 | High | 7.5 | 2024-11-07 | There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the… |
CVE-2024-8615 | Critical | 10.0 | 2024-11-06 | The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_location_load_exce… |
CVE-2024-8614 | Critical | 9.9 | 2024-11-06 | The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_wp_handle_upload()… |
CVE-2024-9307 | Critical | 9.9 | 2024-11-06 | The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1. This makes it… |
CVE-2024-10766 | Medium | 6.3 | 2024-11-04 | A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1.0. This issue affects some unknown pro… |
CVE-2024-10765 | Medium | 6.3 | 2024-11-04 | A vulnerability classified as critical was found in Codezips Online Institute Management System up to 1.0. This vulnerability affects unknown code of the file… |
CVE-2024-10764 | Medium | 6.3 | 2024-11-04 | A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/save_… |
CVE-2024-50531 | Critical | 10.0 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmasters allows Upload a Web Shell to… |
CVE-2024-50530 | Critical | 9.9 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Upload a Web Shell to a Web Server… |
CVE-2024-50529 | Critical | 9.9 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in rudrainn Training – Courses training allows Upload a Web Shell to a Web Server.This issue affe… |
CVE-2024-50527 | Critical | 10.0 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Upload a Web Shell to a Web… |
CVE-2024-50526 | Critical | 10.0 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose-mail-form allows Upload a Web Shell to… |
CVE-2024-50525 | Critical | 10.0 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in helloprint Helloprint helloprint allows Upload a Web Shell to a Web Server.This issue affects… |
CVE-2024-50523 | Critical | 10.0 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in RainbowLink Inc. All Post Contact Form allpost-contactform allows Upload a Web Shell to a Web… |
CVE-2023-52044 | Critical | 9.8 | 2024-10-31 | Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension. |
CVE-2024-10392 | Critical | 9.8 | 2024-10-31 | The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' fu… |
CVE-2024-48734 | High | 8.8 | 2024-10-30 | Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicious files. NOTE: t… |
CVE-2024-48093 | High | 8.0 | 2024-10-30 | Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing mali… |
CVE-2024-48202 | Critical | 9.8 | 2024-10-30 | icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile. |
CVE-2024-48646 | High | 8.1 | 2024-10-30 | An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized users to upload files without proper validation. An attacker coul… |
CVE-2024-50511 | Critical | 9.9 | 2024-10-30 | Unrestricted Upload of File with Dangerous Type vulnerability in donimedia WP donimedia carousel wp-donimedia-carousel allows Upload a Web Shell to a Web Serve… |
CVE-2024-50510 | Critical | 10.0 | 2024-10-30 | Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For Woocommerce ar-for-woocommerce allows Upload a Web Shell to a Web Server.Th… |
CVE-2024-7985 | High | 7.5 | 2024-10-29 | The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the… |
CVE-2024-50473 | Critical | 10.0 | 2024-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed ajar-productions-in5-embed allows Upload a Web Shell to a Web… |
CVE-2024-50427 | Critical | 9.9 | 2024-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in devsoftbaltic SurveyJS surveyjs.This issue affects SurveyJS: from n/a through <= 1.9.136. |
CVE-2024-50420 | Critical | 10.0 | 2024-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in aDirectory aDirectory adirectory allows Upload a Web Shell to a Web Server.This issue affects… |
CVE-2024-50494 | Critical | 10.0 | 2024-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in Amin Omer Sudan Payment Gateway for WooCommerce wc-sudan-payment-gateway allows Upload a Web S… |
CVE-2024-50493 | Critical | 10.0 | 2024-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in masterhomepage Automatic Translation automatic-translation allows Upload a Web Shell to a Web… |
CVE-2024-50484 | Critical | 10.0 | 2024-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose-mail-form allows Upload a Web Shell to… |
CVE-2024-50482 | Critical | 10.0 | 2024-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Upload a Web Shell to a We… |
CVE-2024-50480 | Critical | 9.9 | 2024-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO marketing-automation-by-azexo allows Upload a Web Shell to… |
CVE-2024-50496 | Critical | 10.0 | 2024-10-28 | Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For WordPress ar-for-wordpress allows Upload a Web Shell to a Web Server.This i… |
CVE-2024-50495 | Critical | 10.0 | 2024-10-28 | Unrestricted Upload of File with Dangerous Type vulnerability in nunomorgadinho Plugin Propagator wp-propagator allows Upload a Web Shell to a Web Server.This… |
CVE-2024-48594 | High | 8.8 | 2024-10-28 | File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component. |
CVE-2024-50623 | Critical | 9.8 | 2024-10-28 | In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to re… |
CVE-2024-10420 | Medium | 6.3 | 2024-10-27 | A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marima… |
CVE-2024-10413 | Medium | 6.3 | 2024-10-27 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function… |
CVE-2024-10410 | Medium | 6.3 | 2024-10-27 | A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Affected by this vulnerability is the function upload o… |
CVE-2024-9932 | Critical | 9.8 | 2024-10-26 | The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbt_insertImageNew' functio… |
CVE-2024-37847 | High | 8.8 | 2024-10-25 | An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via a crafted file. |
CVE-2024-45263 | High | 8.8 | 2024-10-24 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of a… |
CVE-2024-48454 | High | 7.2 | 2024-10-24 | An issue in SourceCodester Purchase Order Management System v1.0 allows a remote attacker to execute arbitrary code via the /admin?page=user component |
CVE-2024-49676 | Medium | 6.6 | 2024-10-23 | Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell… |
CVE-2024-49671 | Critical | 9.9 | 2024-10-23 | Unrestricted Upload of File with Dangerous Type vulnerability in Dogu Pekgoz AI Image Generator for Your Content & Featured Images – AI Postpix ai-postpix allo… |
CVE-2024-49669 | Critical | 9.9 | 2024-10-23 | Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This i… |
CVE-2024-49668 | Critical | 10.0 | 2024-10-23 | Unrestricted Upload of File with Dangerous Type vulnerability in christopherdewese1099 Verbalize WP verbalize-wp allows Upload a Web Shell to a Web Server.This… |
CVE-2024-49658 | Critical | 9.9 | 2024-10-23 | Unrestricted Upload of File with Dangerous Type vulnerability in ecomerciar Woocommerce Custom Profile Picture woo-custom-profile-picture allows Upload a Web S… |
CVE-2024-49653 | Critical | 9.9 | 2024-10-23 | Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affect… |
CVE-2024-49652 | Critical | 9.9 | 2024-10-23 | Unrestricted Upload of File with Dangerous Type vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Upload a Web Shell to a… |
CVE-2024-10293 | Medium | 6.3 | 2024-10-23 | A vulnerability was found in ZZCMS 2023. It has been classified as critical. Affected is the function Ebak_SetGotoPak of the file 3/Ebbak5.1/upload/class/funct… |
CVE-2024-10292 | Medium | 6.3 | 2024-10-23 | A vulnerability was found in ZZCMS 2023 and classified as critical. This issue affects some unknown processing of the file 3/Ebak5.1/upload/ChangeTable.php. Th… |
CVE-2024-46482 | High | 8.2 | 2024-10-22 | An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary c… |
CVE-2024-10201 | High | 8.8 | 2024-10-21 | Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload an… |
CVE-2024-49610 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in photokiteditor photokit photokit allows Upload a Web Shell to a Web Server.This issue affects… |
CVE-2024-49607 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This… |
CVE-2024-49331 | Critical | 9.9 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Property Lot Management System plms allows Upload a Web Shell to a Web Server… |
CVE-2024-49330 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in brx8r Nice Backgrounds nicebackgrounds allows Upload a Web Shell to a Web Server.This issue af… |
CVE-2024-49329 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Upload a Web Shell to a Web Server.This iss… |
CVE-2024-49327 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in bepitulaz Woostagram Connect woostagram-connect allows Upload a Web Shell to a Web Server.This… |
CVE-2024-49326 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in Vasileios Kerasiotis Affiliator affiliator-lite allows Upload a Web Shell to a Web Server.This… |
CVE-2024-49324 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in sovratecdev Sovratec Case Management sovratec-case-management allows Upload a Web Shell to a W… |
CVE-2024-49611 | Critical | 10.0 | 2024-10-20 | Unrestricted Upload of File with Dangerous Type vulnerability in paxmanpwnz Product Website Showcase product-websites-showcase allows Upload a Web Shell to a W… |
CVE-2024-10161 | Medium | 6.3 | 2024-10-20 | A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file change-image.php o… |
CVE-2024-10120 | High | 7.3 | 2024-10-18 | A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/commo… |
CVE-2024-49314 | Critical | 10.0 | 2024-10-17 | Unrestricted Upload of File with Dangerous Type vulnerability in jiangqie JiangQie Free Mini Program jiangqie-free-mini-program allows Upload a Web Shell to a… |
CVE-2024-49291 | Critical | 10.0 | 2024-10-17 | Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0. |
CVE-2024-49398 | | 2024-10-17 | The affected product is vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute code. | |
CVE-2024-48180 | Critical | 9.8 | 2024-10-16 | ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to… |
CVE-2024-49260 | Critical | 9.9 | 2024-10-16 | Unrestricted Upload of File with Dangerous Type vulnerability in Limbcode WordPress Gallery Plugin – Limb Image Gallery limb-gallery allows Code Injection.This… |
CVE-2024-49242 | Critical | 10.0 | 2024-10-16 | Unrestricted Upload of File with Dangerous Type vulnerability in Shafiq Digital Lottery digital-lottery allows Upload a Web Shell to a Web Server.This issue af… |
CVE-2024-49216 | Critical | 10.0 | 2024-10-16 | Unrestricted Upload of File with Dangerous Type vulnerability in jclay06 Feed Comments Number feed-comments-number allows Upload a Web Shell to a Web Server.Th… |
CVE-2024-48035 | Critical | 9.9 | 2024-10-16 | Unrestricted Upload of File with Dangerous Type vulnerability in takayukii ACF Images Search And Insert acf-images-search-and-insert allows Upload a Web Shell… |
CVE-2024-48034 | Critical | 9.9 | 2024-10-16 | Unrestricted Upload of File with Dangerous Type vulnerability in fliperrr Creates 3D Flipbook, PDF Flipbook create-flipbook-from-pdf allows Upload a Web Shell… |
CVE-2024-48027 | Critical | 9.9 | 2024-10-16 | Unrestricted Upload of File with Dangerous Type vulnerability in xaraartech External featured image from bing external-featured-image-from-bing allows Upload a… |
CVE-2024-47649 | Critical | 9.1 | 2024-10-16 | Unrestricted Upload of File with Dangerous Type vulnerability in THATplugin Iconize iconize.This issue affects Iconize: from n/a through <= 1.2.4. |
CVE-2024-49257 | Critical | 10.0 | 2024-10-16 | Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting azz-anonim-posting allows Upload a Web Shell to a Web Server.This iss… |
CVE-2020-36842 | High | 8.8 | 2024-10-16 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_i… |
CVE-2016-15042 | Critical | 9.8 | 2024-10-16 | The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to… |
CVE-2024-8918 | High | 7.4 | 2024-10-16 | The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 8.3.9. This is due to a lack of… |
CVE-2024-8746 | High | 7.5 | 2024-10-16 | The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing file type validation via the 'mk_file_fol… |
CVE-2021-4449 | Critical | 9.8 | 2024-10-16 | The ZoomSounds plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'savepng.php' file in versions up to, an… |
CVE-2021-4443 | Critical | 9.8 | 2024-10-16 | The WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including, 2.0.6 via the compiler_save AJAX action… |
CVE-2024-48782 | Critical | 9.8 | 2024-10-15 | File Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to execute arbitrary code via the application only detecting the exte… |
CVE-2024-48781 | Critical | 9.8 | 2024-10-15 | An issue in Wanxing Technology Yitu Project Management Kirin Edition 2.3.6 allows a remote attacker to execute arbitrary code via a specially constructed so fi… |
CVE-2024-9975 | Medium | 6.3 | 2024-10-15 | A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-9985 | Critical | 10.0 | 2024-10-15 | Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it t… |
CVE-2024-9981 | High | 8.8 | 2024-10-15 | The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP… |
CVE-2024-9904 | Medium | 4.7 | 2024-10-13 | A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This vulnerability affects the function pictureUpload of the… |
CVE-2024-9903 | Medium | 4.7 | 2024-10-12 | A vulnerability classified as critical has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This affects the function fileUpload of the file /admin/… |
CVE-2024-46088 | Critical | 9.8 | 2024-10-11 | An arbitrary file upload vulnerability in the ProductAction.entphone interface of Zhejiang University Entersoft Customer Resource Management System v2002 to v2… |
CVE-2024-42640 | Critical | 9.8 | 2024-10-11 | angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an atta… |
CVE-2024-9855 | Medium | 4.7 | 2024-10-11 | A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8. It has been declared as critical. Affected by this vulnerability is the function uploadFil… |
CVE-2024-9816 | Medium | 4.7 | 2024-10-10 | A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2024-9815 | Medium | 4.7 | 2024-10-10 | A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2024-9794 | Medium | 6.3 | 2024-10-10 | A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the fil… |