CWE-434— Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.— MITRE CWE catalog

4,557 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-434page 33 of 92

CVE-2022-2102CRITICALCVSS 9.4EG 9.4
2022-06-24
Controls limiting uploads to certain file extensions may be bypassed. This could allow an attacker to intercept the initial file upload page response and modify the associated code. This modified code can be forwarded and used by a script …
CVE-2026-96431CRITICALCVSS 9.3EG 9.3
2026-09-29
Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicio…
CVE-2025-31114CRITICALCVSS 9.3EG 9.3
2026-08-11
Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing metadata JSON. An attacker with access to the Fooocus web UI may …
CVE-2026-24727CRITICALCVSS 9.3EG 9.3
2026-07-24
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute a…
CVE-2026-5482CRITICALCVSS 9.3EG 9.3
2026-06-15
Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to Remote Code Execution. This project is unmaintained at the time of CVE assi…
CVE-2019-25714CRITICALCVSS 9.3EG 9.3
2026-04-21
Seeyon OA A8 contains an unauthenticated arbitrary file write vulnerability in the /seeyon/htmlofficeservlet endpoint that allows remote attackers to write arbitrary files to the web application root by sending specially crafted POST reque…
CVE-2012-10064CRITICALCVSS 9.3EG 9.3
2026-01-16
Omni Secure Files plugin versions prior to 0.1.14 contain an arbitrary file upload vulnerability in the bundled plupload example endpoint. The /wp-content/plugins/omni-secure-files/plupload/examples/upload.php handler allows unauthenticate…
CVE-2011-10041CRITICALCVSS 9.3EG 9.3
2026-01-15
Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulnerability in process_upload.php due to missing file type validation. An unauthenticated remote attacker can upload arbitrary files to the aff…
CVE-2023-7330CRITICALCVSS 9.3EG 9.3
2025-11-24
Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart fi…
CVE-2025-31342CRITICALCVSS 9.3EG 9.3
2025-10-20
An unrestricted upload of file with dangerous type vulnerability in the upload file function of Galaxy Software Services Corporation Vitals ESP Forum Module through 1.3 version allows remote authenticated users to execute arbitrary system …
CVE-2009-20006CRITICALCVSS 9.3EG 9.3
2025-09-16
osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control…
CVE-2025-55746CRITICALCVSS 9.3EG 9.3
2025-08-20
Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrar…
CVE-2012-10038CRITICALCVSS 9.3EG 9.3
2025-08-11
Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php. The banner upload feature fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP f…
CVE-2012-10052CRITICALCVSS 9.3EG 9.3
2025-08-08
EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script. The application fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP fil…
CVE-2012-10050CRITICALCVSS 9.3EG 9.3
2025-08-08
CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_write.php script. The application fails to validate or restrict uploaded file types, allowing unauthenticated attackers t…
CVE-2012-10049CRITICALCVSS 9.3EG 9.3
2025-08-08
WebPageTest version 2.6 and earlier contains an arbitrary file upload vulnerability in the resultimage.php script. The application fails to validate or sanitize user-supplied input before saving uploaded files to a publicly accessible dire…
CVE-2012-10045CRITICALCVSS 9.3EG 9.3
2025-08-08
XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server. The flaw resides in the upload functionality, which fails to properly validate or restrict u…
CVE-2012-10036CRITICALCVSS 9.3EG 9.3
2025-08-08
Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php. The upload handler fails to validate the file type or enforce authentication, allowing remote attackers to upload mali…
CVE-2014-125113CRITICALCVSS 9.3EG 9.3
2025-08-05
An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the download_agent.php endpoint. An attacker can u…
CVE-2012-10027CRITICALCVSS 9.3EG 9.3
2025-08-05
WP-Property plugin for WordPress up to and including version 1.35.0 contains an unauthenticated file upload vulnerability in the third-party `uploadify.php` script. A remote attacker can upload arbitrary PHP files to a temporary directory …
CVE-2013-10054CRITICALCVSS 9.3EG 9.3
2025-08-04
An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm…
CVE-2013-10055CRITICALCVSS 9.3EG 9.3
2025-08-01
An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fails to enforce proper file extension validation and authentication checks, allow…
CVE-2013-10047CRITICALCVSS 9.3EG 9.3
2025-08-01
An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote attackers to upload arbitrary files to the server’s filesystem. By abusing the upload handler and crafting a traversa…
CVE-2013-10038CRITICALCVSS 9.3EG 9.3
2025-07-31
An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8. The upload.php endpoint fails to properly validate file types and authentication, allowing attackers to upload malicious PHP…
CVE-2013-10034CRITICALCVSS 9.3EG 9.3
2025-07-31
An unrestricted file upload vulnerability exists in Kaseya KServer versions prior to 6.3.0.2. The uploadImage.asp endpoint allows unauthenticated users to upload files to arbitrary paths via a crafted filename parameter in a multipart/form…
CVE-2014-125116CRITICALCVSS 9.3EG 9.3
2025-07-25
A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the install.php installation script. The script remains accessible after deployment and fails to sanitize input before writing t…
CVE-2018-25114CRITICALCVSS 9.3EG 9.3
2025-07-23
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessib…
CVE-2025-34121CRITICALCVSS 9.3EG 9.3
2025-07-16
An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The `wizards/post2file.php` script accepts arbitrary POST parameters, allowing attackers to upload crafted …
CVE-2025-34100CRITICALCVSS 9.3EG 9.3
2025-07-10
An unrestricted file upload vulnerability exists in BuilderEngine 3.5.0 via the integration of the elFinder 2.0 file manager and its use of the jQuery File Upload plugin. The plugin fails to properly validate or restrict file types or loca…
CVE-2020-36167CRITICALCVSS 9.3EG 9.3
2021-01-06
An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it loads the OpenSSL library from the Installation folder. This library in turn attempts to l…
CVE-2024-58298CRITICALCVSS 9.2EG 9.2
2025-12-11
Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form. Attackers can exploit the '…
CVE-2023-7305CRITICALCVSS 9.2EG 9.2
2025-10-15
SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application t…
CVE-2025-54473CRITICALCVSS 9.2EG 9.2
2025-08-15
An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. The issue allows code execution via the unzip feature.
CVE-2014-125126CRITICALCVSS 9.2EG 9.2
2025-07-31
An unrestricted file upload vulnerability exists in Simple E-Document versions 3.0 to 3.1 that allows an unauthenticated attacker to bypass authentication by sending a specific cookie header (access=3) with HTTP requests. The application�…
CVE-2026-17609CRITICALCVSS 9.1EG 9.1
2026-10-08
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 6.3.316 via the submit_form function. This is due to insufficient validation of attacker-…
CVE-2026-56660CRITICALCVSS 9.1EG 9.1
2026-10-01
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler in UpdateCE.php downloads a ZIP archive and extracts its contents into the web root wit…
CVE-2026-70356CRITICALCVSS 9.1EG 9.1
2026-09-29
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server.
CVE-2026-42322CRITICALCVSS 9.1EG 9.1
2026-09-25
Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/themes_standard_pages.php validates uploaded logo content by MIME type but reuses the attacker-controlled extension from std_pgs_logo when …
CVE-2026-78274CRITICALCVSS 9.1EG 9.1
2026-08-27
Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.
CVE-2026-49849CRITICALCVSS 9.1EG 9.1
2026-08-21
xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to upload executable files (e.g., .php). By uploading a specially crafted php file, a…
CVE-2026-66600CRITICALCVSS 9.1EG 9.1
2026-08-20
Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions.
CVE-2026-3418CRITICALCVSS 9.1EG 9.1
2026-08-06
The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-accessible locations. Exploitation requires authenticated admi…
CVE-2026-65461CRITICALCVSS 9.1EG 9.1
2026-07-23
Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions.
CVE-2026-65455CRITICALCVSS 9.1EG 9.1
2026-07-23
Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions.
CVE-2026-27064CRITICALCVSS 9.1EG 9.1
2026-07-23
Editor Arbitrary File Upload in Mailster <= 4.1.17 versions.
CVE-2026-50006CRITICALCVSS 9.1EG 9.1
2026-07-14
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards unauthenticated SQL from its MySQL-compatible server port to SQLite without restricting ATTACH DATABASE filesystem targets. A remote attacker …
CVE-2026-58409CRITICALCVSS 9.1EG 9.1
2026-07-13
ChurchCRM is an open-source church management system. Prior to version 7.4.0, an authenticated administrator can achieve Remote Code Execution (RCE) on the server by installing a malicious plugin ZIP archive containing a PHP webshell. The …
CVE-2026-57658CRITICALCVSS 9.1EG 9.1
2026-06-26
Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions.
CVE-2026-9067CRITICALCVSS 9.1EG 9.1
2026-06-10
The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended me…
CVE-2026-45053CRITICALCVSS 9.1EG 9.1
2026-05-13
CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Arbitrary File Upload vulnerability exists in the REST API File Manager endpoint (POST /api/v1/files) of CubeCart. The endpoint allows any holder of an API key wi…

Map vulnerabilities like CWE-434 to your infrastructure

EchelonGraph correlates every CVE — across CWE-434 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →