CWE-434 · Unrestricted Upload of File with Dangerous Type (page 32)
Page 32 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1345 | Critical | 9.0 | 2022-04-13 | Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's brow… |
CVE-2022-28397 | Critical | 9.8 | 2022-04-12 | An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file. NOTE: Vend… |
CVE-2022-27952 | Critical | 9.8 | 2022-04-12 | An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file. |
CVE-2022-27263 | Critical | 9.8 | 2022-04-12 | An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file. |
CVE-2022-27262 | Critical | 9.8 | 2022-04-12 | An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file. |
CVE-2022-27261 | High | 7.5 | 2022-04-12 | An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files… |
CVE-2022-27260 | Critical | 9.8 | 2022-04-12 | An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file. |
CVE-2022-27140 | Critical | 9.8 | 2022-04-12 | An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted PHP file… |
CVE-2022-27139 | Critical | 9.8 | 2022-04-12 | An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file. NOTE: Vend… |
CVE-2022-24837 | Medium | 5.3 | 2022-04-11 | HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version 1.9.1 and later have an enumerable fil… |
CVE-2022-27115 | Critical | 9.8 | 2022-04-11 | In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload. |
CVE-2022-1008 | High | 7.2 | 2022-04-11 | The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary fi… |
CVE-2022-1045 | Medium | 5.4 | 2022-04-11 | Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0. |
CVE-2022-27477 | Critical | 9.8 | 2022-04-10 | Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit. |
CVE-2022-27131 | Critical | 9.8 | 2022-04-10 | An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-27129 | Critical | 9.8 | 2022-04-10 | An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-27047 | Critical | 9.8 | 2022-04-08 | mogu_blog_cms 5.2 suffers from upload arbitrary files without any limitation. |
CVE-2021-46367 | High | 7.2 | 2022-04-08 | RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. An authenticated attacker can upload a PHP file and bypa… |
CVE-2022-27357 | Critical | 9.8 | 2022-04-08 | Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. This vulnerability allows attackers to execut… |
CVE-2022-27352 | High | 8.8 | 2022-04-08 | Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. This vulnerability allows attackers to ex… |
CVE-2022-27351 | Critical | 9.8 | 2022-04-08 | Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows attackers… |
CVE-2022-27349 | High | 7.2 | 2022-04-08 | Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerability allows attackers to execute arbitra… |
CVE-2022-27346 | High | 8.8 | 2022-04-08 | Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to ex… |
CVE-2022-27064 | High | 8.8 | 2022-04-08 | Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploaded_songs.php. This vulnerability allows attackers to execute arbitr… |
CVE-2022-27061 | High | 7.2 | 2022-04-08 | AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows at… |
CVE-2021-43430 | High | 8.8 | 2022-04-07 | An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via im_webserver, which could let a malicious user upload PHP Trojan files. |
CVE-2021-43421 | Critical | 9.8 | 2022-04-07 | A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via connector.minimal.php, which allows a remote malicious user to upload arbitrary fi… |
CVE-2022-26627 | High | 8.8 | 2022-04-07 | Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via… |
CVE-2022-26607 | High | 7.2 | 2022-04-06 | A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP f… |
CVE-2022-26605 | High | 8.8 | 2022-04-06 | eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality. |
CVE-2022-26630 | High | 8.8 | 2022-04-05 | Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php. |
CVE-2021-28428 | Critical | 9.8 | 2022-04-05 | File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functionality. The origin… |
CVE-2022-26619 | High | 7.5 | 2022-04-05 | Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function. |
CVE-2020-28062 | High | 7.2 | 2022-04-04 | An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, whi… |
CVE-2022-0537 | High | 7.2 | 2022-04-04 | The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload… |
CVE-2022-0403 | High | 8.1 | 2022-04-04 | The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues (C… |
CVE-2022-28062 | High | 8.8 | 2022-04-04 | Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitr… |
CVE-2022-27435 | High | 8.8 | 2022-04-04 | An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image comp… |
CVE-2022-27249 | High | 8.8 | 2022-04-03 | An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to… |
CVE-2021-32961 | High | 7.5 | 2022-04-01 | A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a spe… |
CVE-2022-23155 | High | 7.2 | 2022-04-01 | Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability. A malicious user with admin privileges can exploit thi… |
CVE-2021-34257 | High | 8.8 | 2022-03-31 | Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image, (2) Pos… |
CVE-2022-24136 | Critical | 9.8 | 2022-03-31 | Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can u… |
CVE-2022-26645 | Critical | 9.8 | 2022-03-30 | A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded th… |
CVE-2022-28223 | Critical | 9.1 | 2022-03-30 | Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin. |
CVE-2021-45865 | Critical | 9.8 | 2022-03-29 | A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality. |
CVE-2021-43103 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. |
CVE-2021-43102 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. |
CVE-2021-43101 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious user execute arbitrar… |
CVE-2021-43100 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. |
CVE-2021-43098 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function. |
CVE-2022-0499 | High | 8.8 | 2022-03-28 | The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allo… |
CVE-2021-40905 | High | 8.8 | 2022-03-25 | The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" files, which are Extens… |
CVE-2022-23880 | Critical | 9.8 | 2022-03-23 | An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code via a crafted PHP fil… |
CVE-2022-22952 | Critical | 9.1 | 2022-03-23 | VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file upload vulnerabili… |
CVE-2022-0888 | Critical | 9.8 | 2022-03-23 | The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~… |
CVE-2021-27428 | Critical | 9.8 | 2022-03-23 | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool valida… |
CVE-2022-1033 | High | 7.8 | 2022-03-23 | Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6. |
CVE-2022-1034 | High | 7.2 | 2022-03-22 | There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-23346 | High | 8.8 | 2022-03-21 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues. |
CVE-2022-0687 | High | 8.8 | 2022-03-21 | The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being… |
CVE-2022-0415 | High | 8.8 | 2022-03-21 | Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6. |
CVE-2021-39384 | Critical | 9.8 | 2022-03-20 | DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java. |
CVE-2020-26008 | High | 7.8 | 2022-03-20 | The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attacke… |
CVE-2020-26007 | High | 7.8 | 2022-03-20 | An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows attackers to execute arbitrary code via uploading a crafted PHP fil… |
CVE-2022-25581 | High | 7.8 | 2022-03-18 | Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection v… |
CVE-2022-25602 | High | 8.3 | 2022-03-18 | Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugin (version… |
CVE-2021-45835 | Critical | 9.8 | 2022-03-18 | The Online Admission System 1.0 allows an unauthenticated attacker to upload or transfer files of dangerous types to the application through documents.php, whi… |
CVE-2021-45834 | Critical | 9.8 | 2022-03-18 | An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed… |
CVE-2022-26965 | High | 7.2 | 2022-03-18 | In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution. |
CVE-2021-45040 | Critical | 9.8 | 2022-03-17 | The Spatie media-library-pro library through 1.17.10 and 2.x through 2.1.6 for Laravel allows remote attackers to upload executable files via the uploads route. |
CVE-2022-0959 | Medium | 6.5 | 2022-03-16 | A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to… |
CVE-2022-25495 | Critical | 9.8 | 2022-03-15 | The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP… |
CVE-2022-25487 | Critical | 9.8 | 2022-03-15 | Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. |
CVE-2022-0951 | Medium | 6.1 | 2022-03-15 | File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0950 | Medium | 5.4 | 2022-03-15 | Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0945 | Medium | 5.4 | 2022-03-15 | Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4. |
CVE-2022-24749 | Medium | 6.1 | 2022-03-14 | Sylius is an open source eCommerce platform. In versions prior to 1.9.10, 1.10.11, and 1.11.2, it is possible to upload an SVG file containing cross-site scrip… |
CVE-2022-0962 | Medium | 5.4 | 2022-03-14 | Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0960 | Medium | 5.4 | 2022-03-14 | Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2021-42171 | High | 7.2 | 2022-03-14 | Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-shell which can run commands, browse sys… |
CVE-2021-25003 | Critical | 9.8 | 2022-03-14 | The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web ser… |
CVE-2022-24387 | Critical | 9.1 | 2022-03-14 | With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g. the systemsettings.xml file. THis… |
CVE-2022-0930 | Medium | 4.8 | 2022-03-12 | File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12. |
CVE-2022-0921 | Medium | 6.7 | 2022-03-11 | Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12. |
CVE-2022-0912 | Medium | 4.8 | 2022-03-11 | Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11. |
CVE-2021-44673 | High | 8.8 | 2022-03-10 | A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script. |
CVE-2022-26521 | High | 7.2 | 2022-03-10 | Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Media Manage… |
CVE-2022-24652 | Critical | 9.8 | 2022-03-10 | sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in php code execution in /admin/… |
CVE-2022-24651 | Critical | 9.8 | 2022-03-10 | sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in PHP code execution through /u… |
CVE-2021-43970 | High | 8.8 | 2022-03-10 | An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 (1043) via a .mp3;.jsp filename for a file that begins with aud… |
CVE-2022-0440 | High | 7.2 | 2022-03-07 | The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload… |
CVE-2021-24960 | Medium | 5.4 | 2022-03-07 | The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 allows users with a role as low as Contribut… |
CVE-2021-24216 | High | 7.2 | 2022-03-07 | The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their… |
CVE-2022-25115 | High | 7.8 | 2022-03-02 | A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows… |
CVE-2022-25016 | Critical | 9.8 | 2022-03-02 | Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php… |
CVE-2022-24254 | High | 8.8 | 2022-03-01 | An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code… |
CVE-2022-24253 | High | 8.8 | 2022-03-01 | Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransferServlet. |
CVE-2022-24252 | High | 8.8 | 2022-03-01 | An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via… |
CVE-2022-24251 | High | 8.8 | 2022-03-01 | Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function. |