CWE-434 · Unrestricted Upload of File with Dangerous Type (page 43)
Page 43 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14704 | High | 8.8 | 2017-09-26 | Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authen… |
CVE-2017-14079 | High | 8.8 | 2017-09-22 | Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerabl… |
CVE-2017-12929 | High | 8.8 | 2017-09-21 | Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Re… |
CVE-2014-9619 | High | 7.2 | 2017-09-19 | Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2… |
CVE-2017-12615 | High | 8.1 | 2017-09-19 | When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) i… |
CVE-2017-1002016 | Critical | 9.8 | 2017-09-14 | Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that… |
CVE-2017-1002008 | Critical | 9.8 | 2017-09-14 | Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/d… |
CVE-2017-1002003 | Critical | 9.8 | 2017-09-14 | Vulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin includes unlicensed vulnerable CMS software from http://www.inved… |
CVE-2017-1002002 | Critical | 9.8 | 2017-09-14 | Vulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com/ |
CVE-2017-1002001 | Critical | 9.8 | 2017-09-14 | Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com. |
CVE-2017-1002000 | Critical | 9.8 | 2017-09-14 | Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php… |
CVE-2017-14399 | High | 8.8 | 2017-09-12 | In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the exten… |
CVE-2017-14346 | Critical | 9.8 | 2017-09-12 | upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image… |
CVE-2015-9228 | High | 8.8 | 2017-09-12 | In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extensio… |
CVE-2017-14251 | High | 8.8 | 2017-09-11 | Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8… |
CVE-2017-14123 | High | 8.8 | 2017-09-04 | Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensi… |
CVE-2017-14050 | High | 8.8 | 2017-08-31 | In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file. |
CVE-2013-7426 | Critical | 9.8 | 2017-08-29 | Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1. |
CVE-2016-0354 | Medium | 5.5 | 2017-08-29 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a malicious file to a Sametime meeting room, that could be dow… |
CVE-2014-9312 | High | 8.8 | 2017-08-28 | Unrestricted File Upload vulnerability in Photo Gallery 1.2.5. |
CVE-2017-9650 | High | 7.8 | 2017-08-25 | An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC… |
CVE-2017-11357 | Critical | 9.8 | 2017-08-23 | Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbit… |
CVE-2017-3108 | Critical | 9.8 | 2017-08-11 | Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability. |
CVE-2017-11154 | High | 7.2 | 2017-08-08 | Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arb… |
CVE-2017-12678 | High | 8.8 | 2017-08-08 | In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a de… |
CVE-2015-7571 | High | 7.8 | 2017-08-07 | Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. |
CVE-2017-11756 | High | 7.0 | 2017-07-30 | In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to… |
CVE-2015-4463 | Medium | 6.5 | 2017-07-25 | The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended file-upload restrictions by appending a crafted p… |
CVE-2015-4462 | Medium | 6.5 | 2017-07-25 | Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via… |
CVE-2017-11326 | High | 7.5 | 2017-07-24 | An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation. |
CVE-2017-11466 | High | 7.2 | 2017-07-20 | Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to uplo… |
CVE-2017-11405 | Medium | 4.9 | 2017-07-18 | In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, follo… |
CVE-2017-11404 | Medium | 4.9 | 2017-07-18 | In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php. |
CVE-2017-1000081 | Critical | 9.8 | 2017-07-17 | Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution. |
CVE-2017-6041 | Critical | 9.8 | 2017-06-30 | An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Maste… |
CVE-2017-9840 | High | 8.8 | 2017-06-25 | Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context… |
CVE-2017-4990 | Critical | 9.8 | 2017-06-21 | In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system… |
CVE-2017-9380 | High | 8.8 | 2017-06-02 | OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vu… |
CVE-2017-9364 | Critical | 9.8 | 2017-06-02 | Unrestricted File Upload exists in BigTree CMS through 4.2.18: if an attacker uploads an 'xxx.pht' or 'xxx.phtml' file, they could bypass a safety check and ex… |
CVE-2015-4455 | Critical | 9.8 | 2017-05-23 | Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote a… |
CVE-2017-9101 | Critical | 9.8 | 2017-05-21 | import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the… |
CVE-2017-9080 | High | 8.8 | 2017-05-19 | PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted… |
CVE-2017-6027 | Critical | 9.8 | 2017-05-19 | An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the… |
CVE-2017-9069 | High | 8.8 | 2017-05-18 | In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess. |
CVE-2017-8080 | High | 8.8 | 2017-05-05 | Atlassian Hipchat Server before 2.2.4 allows remote authenticated users with user level privileges to execute arbitrary code via vectors involving image upload… |
CVE-2017-7989 | Medium | 6.5 | 2017-04-25 | In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate MIME type checks allowed low-privilege users to upload swf files even if they were explicitly forbi… |
CVE-2017-7357 | Critical | 9.1 | 2017-04-14 | Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file. |
CVE-2016-1713 | High | 7.3 | 2017-04-14 | Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtig… |
CVE-2017-7281 | High | 8.8 | 2017-04-12 | An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in r… |
CVE-2017-7695 | Critical | 9.8 | 2017-04-11 | Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php[space]' file, they could bypass a safety check and execute any… |
CVE-2016-8973 | Medium | 4.3 | 2017-03-20 | IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload infected malicious files to the server. I… |
CVE-2015-3884 | High | 8.8 | 2017-03-17 | Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) scheduler pages in qdP… |
CVE-2017-6104 | High | 7.5 | 2017-03-02 | Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0. |
CVE-2016-6104 | High | 7.2 | 2017-02-07 | IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, wh… |
CVE-2016-8921 | High | 8.8 | 2017-02-01 | IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable se… |
CVE-2016-6124 | High | 8.8 | 2017-02-01 | IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary cod… |
CVE-2017-5520 | High | 8.8 | 2017-01-17 | The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enable… |
CVE-2016-7902 | High | 8.8 | 2017-01-04 | Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authenticated users with permissions to manage me… |
CVE-2016-9268 | High | 7.2 | 2016-11-10 | Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticate… |
CVE-2016-9187 | High | 8.8 | 2016-11-04 | Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbit… |
CVE-2016-9186 | High | 8.8 | 2016-11-04 | Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arb… |
CVE-2016-7452 | High | 7.5 | 2016-11-03 | The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory travers… |
CVE-2016-7095 | Critical | 9.8 | 2016-11-03 | Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one al… |
CVE-2015-1000013 | High | 7.8 | 2016-10-06 | Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1 |
CVE-2015-1000001 | Critical | 9.8 | 2016-10-06 | Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin |
CVE-2015-1000000 | Critical | 9.8 | 2016-10-06 | Remote file upload vulnerability in mailcwp v1.99 wordpress plugin |
CVE-2016-5050 | Critical | 9.8 | 2016-08-26 | Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a… |
CVE-2016-2914 | Medium | 5.4 | 2016-08-08 | Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated u… |
CVE-2016-3088 | Critical | 9.8 | 2016-06-01 | The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by a… |
CVE-2015-4524 | | 2015-07-04 | Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 befor… | |
CVE-2015-0702 | | 2015-04-21 | Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to… | |
CVE-2006-6994 | | 2007-02-12 | Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP fi… | |
CVE-2006-5845 | | 2006-11-10 | Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the… | |
CVE-2006-4558 | | 2006-09-06 | DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading file… | |
CVE-2006-4471 | | 2006-08-31 | The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via u… | |
CVE-2006-2428 | | 2006-05-17 | add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due… | |
CVE-2005-3288 | | 2005-10-23 | Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feat… | |
CVE-2005-1868 | | 2005-06-09 | I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension. | |
CVE-2005-1881 | | 2005-06-06 | upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbi… | |
CVE-2005-0254 | Low | 3.7 | 2005-05-02 | BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to uplo… |
CVE-2004-2262 | | 2004-12-31 | ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a P… | |
CVE-2002-1841 | | 2002-12-31 | The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and exec… | |
CVE-2001-0901 | | 2001-11-19 | Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the… | |
CVE-2001-1099 | | 2001-09-07 | The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an… | |
CVE-2001-0340 | | 2001-07-21 | An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious scrip… | |
CVE-1999-0036 | High | 8.4 | 1997-05-26 | IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files. |