CWE-434 · Unrestricted Upload of File with Dangerous Type (page 41)
Page 41 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19562 | High | 8.8 | 2018-11-26 | An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background > Program Upgrad… |
CVE-2018-19550 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .p… |
CVE-2018-19537 | High | 7.2 | 2018-11-26 | TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file tha… |
CVE-2018-19457 | High | 7.2 | 2018-11-22 | Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file. |
CVE-2018-19424 | High | 7.2 | 2018-11-21 | ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files. |
CVE-2018-19423 | High | 7.2 | 2018-11-21 | Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file. |
CVE-2018-19422 | High | 7.2 | 2018-11-21 | /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these. |
CVE-2018-19421 | Low | 3.8 | 2018-11-21 | In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php… |
CVE-2018-19420 | Low | 3.8 | 2018-11-21 | In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can be executed, such as a file with no ext… |
CVE-2018-18565 | Medium | 6.8 | 2018-11-20 | An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000… |
CVE-2018-18563 | Critical | 9.6 | 2018-11-20 | An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000… |
CVE-2018-9209 | Critical | 9.8 | 2018-11-19 | Unauthenticated arbitrary file upload vulnerability in FineUploader php-traditional-server <= v1.2.2 |
CVE-2018-9207 | Critical | 9.8 | 2018-11-19 | Arbitrary file upload in jQuery Upload File <= 4.0.2 |
CVE-2018-19355 | Critical | 9.8 | 2018-11-19 | modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to execute arbitrary… |
CVE-2018-18793 | Critical | 9.8 | 2018-11-16 | School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos. |
CVE-2018-0686 | High | 8.8 | 2018-11-15 | Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote authenticated attackers to upload… |
CVE-2018-19126 | Critical | 9.8 | 2018-11-09 | PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload. |
CVE-2018-9208 | Critical | 9.8 | 2018-11-05 | Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1Beta |
CVE-2018-18942 | High | 7.2 | 2018-11-05 | In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConf… |
CVE-2018-18934 | Critical | 9.8 | 2018-11-05 | An issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload pa… |
CVE-2018-1552 | Medium | 5.5 | 2018-11-02 | IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing res… |
CVE-2018-18888 | Critical | 9.8 | 2018-11-01 | An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the… |
CVE-2018-18874 | Critical | 9.8 | 2018-10-31 | nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type… |
CVE-2018-18830 | Critical | 9.8 | 2018-10-30 | An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you c… |
CVE-2018-18771 | High | 7.5 | 2018-10-29 | An issue was discovered in LuLu CMS through 2015-05-14. backend\modules\filemanager\controllers\DefaultController.php allows arbitrary file upload by entering… |
CVE-2018-18752 | Critical | 9.8 | 2018-10-29 | Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter. |
CVE-2018-18475 | Critical | 9.8 | 2018-10-23 | Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload. |
CVE-2018-18382 | High | 8.8 | 2018-10-16 | Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile"… |
CVE-2018-18315 | High | 7.5 | 2018-10-15 | com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks… |
CVE-2018-9206 | Critical | 9.8 | 2018-10-11 | Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0 |
CVE-2018-18086 | High | 8.8 | 2018-10-09 | EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users. |
CVE-2018-17442 | High | 8.8 | 2018-10-08 | An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerability in the onUploadLogPic endpoint allow… |
CVE-2018-17440 | Critical | 9.8 | 2018-10-08 | An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default on port 9000 and has hardcode… |
CVE-2018-15424 | Medium | 4.7 | 2018-10-05 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrar… |
CVE-2015-9271 | Critical | 9.8 | 2018-10-04 | The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.p… |
CVE-2018-17553 | High | 8.8 | 2018-10-03 | An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated at… |
CVE-2018-17573 | Critical | 9.8 | 2018-09-28 | The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/edi… |
CVE-2018-17055 | High | 7.5 | 2018-09-28 | An arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0 related to image uploads. |
CVE-2018-15961 | Critical | 9.8 | 2018-09-25 | Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Su… |
CVE-2018-16821 | Medium | 5.3 | 2018-09-21 | SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests. |
CVE-2018-17139 | High | 8.8 | 2018-09-17 | UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with… |
CVE-2018-16287 | Critical | 9.8 | 2018-09-14 | LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs. |
CVE-2018-16796 | High | 8.8 | 2018-09-13 | HiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types. |
CVE-2018-16974 | Critical | 9.8 | 2018-09-12 | An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upload/drop.php by using /filemanager/api/… |
CVE-2018-16388 | High | 7.2 | 2018-09-12 | e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content ty… |
CVE-2018-16731 | Critical | 9.8 | 2018-09-08 | CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathna… |
CVE-2018-0645 | Critical | 9.8 | 2018-09-07 | MTAppjQuery 1.8.1 and earlier allows remote PHP code execution via unspecified vectors. |
CVE-2018-1000658 | High | 8.8 | 2018-09-06 | LimeSurvey version prior to 3.14.4 contains a file upload vulnerability in upload functionality that can result in an attacker gaining code execution via websh… |
CVE-2018-16397 | Medium | 4.9 | 2018-09-03 | In LimeSurvey before 3.14.7, an admin user can leverage a "file upload" question to read an arbitrary file, |
CVE-2018-16373 | Medium | 4.9 | 2018-09-03 | Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save. |
CVE-2018-16370 | Critical | 9.8 | 2018-09-03 | In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive. |
CVE-2018-16352 | Critical | 9.8 | 2018-09-02 | There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content typ… |
CVE-2018-15882 | Critical | 9.8 | 2018-08-29 | An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload fi… |
CVE-2015-9263 | Critical | 9.8 | 2018-08-27 | An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file… |
CVE-2014-10074 | Critical | 9.8 | 2018-08-27 | Umbraco before 7.2.0 has a remote PHP code execution vulnerability because Umbraco.Web.UI/config/umbracoSettings.Release.config does not block the upload of .p… |
CVE-2018-3832 | Critical | 9.0 | 2018-08-23 | An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows for uploading arbitrary MPFS binaries… |
CVE-2018-1000646 | High | 8.8 | 2018-08-20 | LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write files with m… |
CVE-2018-15573 | High | 8.8 | 2018-08-20 | An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk (as lo… |
CVE-2018-12256 | High | 8.8 | 2018-08-16 | admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file (resulting in remote code execution)… |
CVE-2018-15139 | High | 8.8 | 2018-08-13 | Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbit… |
CVE-2018-14028 | High | 7.2 | 2018-08-10 | In WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files. This allows for PHP files to be uploaded. Once a PHP file is uploa… |
CVE-2018-15137 | Critical | 9.8 | 2018-08-08 | CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml), which causes remote code execution as… |
CVE-2018-14857 | High | 8.8 | 2018-08-06 | Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 a… |
CVE-2018-14911 | High | 7.2 | 2018-08-03 | A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker… |
CVE-2018-12468 | Critical | 9.1 | 2018-08-01 | A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to… |
CVE-2018-12940 | High | 8.8 | 2018-07-31 | Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to execute arbi… |
CVE-2017-3189 | High | 8.1 | 2018-07-24 | The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to arbitrary file upload. When "Bundle"… |
CVE-2018-14570 | High | 8.8 | 2018-07-23 | A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote member to upload a… |
CVE-2018-14441 | Critical | 9.8 | 2018-07-20 | An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadAction_fileUpload.action allows arbitrary file upload, as de… |
CVE-2018-14334 | Critical | 9.8 | 2018-07-17 | manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and d… |
CVE-2018-13981 | Critical | 9.8 | 2018-07-16 | The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component th… |
CVE-2016-9492 | Critical | 9.8 | 2018-07-13 | The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types. In the generated form.lib… |
CVE-2018-12980 | High | 8.8 | 2018-07-12 | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user to uploa… |
CVE-2018-1000619 | High | 8.8 | 2018-07-09 | Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddonFilePathfromTg that can result in Authenticated… |
CVE-2018-11638 | High | 7.2 | 2018-07-03 | Unrestricted Upload of a File with a Dangerous Type in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to u… |
CVE-2018-12426 | Critical | 9.8 | 2018-07-02 | The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed… |
CVE-2018-12528 | High | 8.1 | 2018-07-02 | An issue was discovered on Intex N150 devices. The backup/restore option does not check the file extension uploaded for importing a configuration files backup… |
CVE-2018-13038 | Critical | 9.8 | 2018-07-01 | OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. This vulnerability leads to uploading arbi… |
CVE-2018-13024 | High | 7.2 | 2018-06-29 | Metinfo v6.0.0 allows remote attackers to write code into a .php file, and execute that code, via the module parameter to admin/column/save.php in an editor up… |
CVE-2018-13021 | High | 7.2 | 2018-06-29 | An issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can result in PHP code execution via the admin/index.php/template… |
CVE-2018-12914 | Critical | 9.8 | 2018-06-27 | A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traver… |
CVE-2018-1000544 | Critical | 9.8 | 2018-06-26 | rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to t… |
CVE-2018-0571 | Medium | 4.3 | 2018-06-26 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitra… |
CVE-2018-12519 | High | 8.8 | 2018-06-19 | An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An atta… |
CVE-2018-11221 | Critical | 9.8 | 2018-06-16 | Unauthenticated untrusted file upload in Artica Pandora FMS through version 7.23 allows an attacker to upload an arbitrary plugin via include/ajax/update_manag… |
CVE-2018-12491 | Critical | 9.8 | 2018-06-15 | PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework/admin/modulec_control.php, as demonstrated by uploading a .php f… |
CVE-2011-4183 | Medium | 6.5 | 2018-06-13 | A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16. |
CVE-2018-12263 | High | 8.8 | 2018-06-13 | portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI. |
CVE-2018-1453 | High | 8.8 | 2018-06-08 | IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically p… |
CVE-2018-12051 | Critical | 9.8 | 2018-06-08 | Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrat… |
CVE-2018-12045 | Critical | 9.8 | 2018-06-08 | DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parame… |
CVE-2018-3758 | High | 8.8 | 2018-06-07 | Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine. |
CVE-2018-1265 | High | 7.2 | 2018-06-06 | Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privi… |
CVE-2018-11736 | Critical | 9.8 | 2018-06-05 | An issue was discovered in Pluck before 4.7.7-dev2. /data/inc/images.php allows remote attackers to upload and execute arbitrary PHP code by using the image/jp… |
CVE-2018-11196 | High | 7.5 | 2018-06-01 | Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses by placing infected files into a Leap2A… |
CVE-2018-11392 | High | 8.8 | 2018-05-29 | An arbitrary file upload vulnerability in /classes/profile.class.php in Jigowatt "PHP Login & User Management" before 4.1.1, as distributed in the Envato Marke… |
CVE-2018-11523 | Critical | 9.8 | 2018-05-29 | upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files. |
CVE-2018-11514 | High | 8.8 | 2018-05-28 | PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in edit_resume_det.php, as demonstrated by changi… |
CVE-2018-6411 | Critical | 9.8 | 2018-05-26 | An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to the filter… |
CVE-2018-11494 | High | 8.0 | 2018-05-26 | The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that allows attackers to… |