CWE-434— Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.— MITRE CWE catalog
4,569 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-434page 64 of 92
- CVE-2017-16736HIGHCVSS 7.5EG 7.52018-01-12
An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows a remote attacker to upload arbitrary files.
- CVE-2017-17593HIGHCVSS 7.5EG 7.52017-12-13
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
- CVE-2017-15054HIGHCVSS 7.5EG 7.52017-11-27
An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. To exploit this vulnerability, an authenticated attacker has to t…
- CVE-2017-11326HIGHCVSS 7.5EG 7.52017-07-24
An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation.
- CVE-2017-6104HIGHCVSS 7.5EG 7.52017-03-02
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.
- CVE-2016-7452HIGHCVSS 7.5EG 7.52016-11-03
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory traversal.
- CVE-2022-4732HIGHCVSS 7.2EG 7.52022-12-27
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.
- CVE-2020-14008HIGHCVSS 7.2EG 7.52020-09-04
Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.
- CVE-2018-1000094HIGHCVSS 7.2EG 7.52018-03-13
CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be explo…
- CVE-2022-39019HIGHCVSS 6.3EG 7.52022-10-31
Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server.
- CVE-2022-3436HIGHCVSS 6.3EG 7.52022-10-09
A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulati…
- CVE-2022-37426HIGHCVSS 4.3EG 7.52022-10-28
Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection.
- CVE-2006-4558HIGHCVSS v2 7.5EG 7.52006-09-06
DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in n…
- CVE-2006-2428HIGHCVSS v2 7.5EG 7.52006-05-17
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details ar…
- CVE-2005-1868HIGHCVSS v2 7.5EG 7.52005-06-09
I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension.
- CVE-2005-1881HIGHCVSS v2 7.5EG 7.52005-06-06
upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code.
- CVE-2004-2262HIGHCVSS v2 7.5EG 7.52004-12-31
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php.
- CVE-2001-0901HIGHCVSS v2 7.5EG 7.52001-11-19
Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment.
- CVE-2001-0340HIGHCVSS v2 7.5EG 7.52001-07-21
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code…
- CVE-2024-8918HIGHCVSS 7.4EG 7.42024-10-16
The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 8.3.9. This is due to a lack of proper checks on allowed file types. This makes it possible for unauthenticated…
- CVE-2024-28147HIGHCVSS 7.4EG 7.42024-06-20
An authenticated user can upload arbitrary files in the upload function for collection preview images. An attacker may upload an HTML file that includes malicious JavaScript code which will be executed if a user visits the direct URL of…
- CVE-2020-7847HIGHCVSS 7.4EG 7.42021-02-23
The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.
- CVE-2019-15843HIGHCVSS 7.4EG 7.42019-09-18
A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle attack may lead to partial data leakage or malicious file writing.
- CVE-2023-2523HIGHCVSS 7.3EG 7.42023-05-04
A vulnerability was found in Weaver E-Office 9.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file App/Ajax/ajax.php?action=mobile_upload_save. The manipulation of the argument upload_quwan le…
- CVE-2022-26965HIGHCVSS 7.2EG 7.42022-03-18
In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution.
- CVE-2026-108975HIGHCVSS 7.3EG 7.32026-10-13
A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. Performing a manipulation of the argument image results in unr…
- CVE-2026-108974HIGHCVSS 7.3EG 7.32026-10-13
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launc…
- CVE-2026-108973HIGHCVSS 7.3EG 7.32026-10-13
A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted uplo…
- CVE-2026-91844HIGHCVSS 7.3EG 7.32026-10-08
Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6.
- CVE-2026-105679HIGHCVSS 7.3EG 7.32026-10-05
Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restrict…
- CVE-2026-105651HIGHCVSS 7.3EG 7.32026-10-05
Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, includi…
- CVE-2026-105649HIGHCVSS 7.3EG 7.32026-10-05
Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored without sanitization. This allowed any staff user, including Contributors, to ho…
- CVE-2026-104637HIGHCVSS 7.3EG 7.32026-10-02
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function add_patient/add_physician/add_account/update_account/update_subaccount/edit_phy…
- CVE-2026-96513HIGHCVSS 7.3EG 7.32026-09-23
A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the file AddProductCode.php. The manipulation of the argument image results in unrestricted upload. The attack may be performe…
- CVE-2026-95500HIGHCVSS 7.3EG 7.32026-09-22
A vulnerability has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. Impacted is the function file_put_contents of the file codeEditor.php of the component Save Handler. The manipulation of the argument filename/conte…
- CVE-2026-95499HIGHCVSS 7.3EG 7.32026-09-22
A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function move_uploaded_file of the file filemanager.php. Executing a manipulation of the argument files can lead to unrestricted uploa…
- CVE-2026-90603HIGHCVSS 7.3EG 7.32026-09-13
A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-…
- CVE-2026-86666HIGHCVSS 7.3EG 7.32026-09-08
A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFile of the file controllers/pic.php. The manipulation results in unrestricted upload. The attack can be executed remotel…
- CVE-2026-86305HIGHCVSS 7.3EG 7.32026-09-07
A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function Upload::upload of the file ThinkPHP/Library/Think/Upload.class.p…
- CVE-2026-86272HIGHCVSS 7.3EG 7.32026-09-07
A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Upload/UploadFormImg.ashx. Executing a manipulation of the argument File …
- CVE-2026-85208HIGHCVSS 7.3EG 7.32026-09-03
A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of the file /rider/orders/controller.php?action=add of the component Order Management Controller. Perfor…
- CVE-2026-76782HIGHCVSS 7.3EG 7.32026-09-02
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
- CVE-2026-82921HIGHCVSS 7.3EG 7.32026-08-31
A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/pack.php. Executing a manipulation of the argument pack_img can lead to unrestricted upload. It is possible to launch t…
- CVE-2026-82607HIGHCVSS 7.3EG 7.32026-08-31
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppb_ajax_simple_avatar of the file /wp-admin/admin-ajax.php of the component Avatar Simple Upload AJAX Handler.…
- CVE-2026-78245HIGHCVSS 7.3EG 7.32026-08-24
A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function move_uploaded_file of the file all_users/register.php of the component User Registration. Executing a manipulation of the argument photo can lead t…
- CVE-2026-78202HIGHCVSS 7.3EG 7.32026-08-24
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote…
- CVE-2026-18969HIGHCVSS 7.3EG 7.32026-08-05
A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload. Performing a manipulation of the argument File results in…
- CVE-2026-18788HIGHCVSS 7.3EG 7.32026-08-04
A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed …
- CVE-2026-16447HIGHCVSS 7.3EG 7.32026-07-21
A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multi_uploadify.php. The manipulation of the argument Filedata[] leads to unrestricted upload. Remote exploitation of …
- CVE-2026-16332HIGHCVSS 7.3EG 7.32026-07-21
A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multi_uploadify.php. Performing a manipulation of the argument Filedata[] results in unrestricted upload. The attack is possible to…
Map vulnerabilities like CWE-434 to your infrastructure
EchelonGraph correlates every CVE — across CWE-434 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →