CWE-434— Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.— MITRE CWE catalog

4,576 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-434page 88 of 92

CVE-2011-4907MEDIUMCVSS 5.3EG 5.3
2020-01-15
Joomla! 1.5x through 1.5.12: Missing JEXEC Check
CVE-2018-19789MEDIUMCVSS 5.3EG 5.3
2018-12-18
An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1. When using the scalar type hint `string` in a setter method (e.g. `setName(str…
CVE-2018-16821MEDIUMCVSS 5.3EG 5.3
2018-09-21
SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests.
CVE-2025-61768MEDIUMCVSS 5.1EG 5.1
2025-10-06
KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upl…
CVE-2025-3169MEDIUMCVSS 5.0EG 5.0
2025-04-03
A vulnerability was found in Projeqtor up to 12.0.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /tool/saveAttachment.php. The manipulation of the argument attachmentFiles leads to unrest…
CVE-2024-1925MEDIUMCVSS 5.0EG 5.0
2024-02-27
A vulnerability was found in Ctcms 2.1.2. It has been declared as critical. This vulnerability affects unknown code of the file ctcms/apps/controllers/admin/Upsys.php. The manipulation leads to unrestricted upload. The attack can be initia…
CVE-2005-3288MEDIUMCVSS v2 5.0EG 5.0
2005-10-23
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending t…
CVE-2002-1841MEDIUMCVSS v2 5.0EG 5.0
2002-12-31
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
CVE-2001-1099MEDIUMCVSS v2 5.0EG 5.0
2001-09-07
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path …
CVE-2026-43752MEDIUMCVSS 4.9EG 4.9
2026-07-09
An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMa…
CVE-2025-20130MEDIUMCVSS 4.9EG 4.9
2025-06-04
A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. Th…
CVE-2024-51991MEDIUMCVSS 4.9EG 4.9
2025-05-05
October is a Content Management System (CMS) and web platform. A vulnerability in versions prior to 3.7.5 affects authenticated administrators with sites that have the `media.clean_vectors` configuration enabled. This configuration will sa…
CVE-2025-26350MEDIUMCVSS 4.9EG 4.9
2025-02-12
A CWE-434 "Unrestricted Upload of File with Dangerous Type" in the template file uploads in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to upload malicious files via crafted HTTP requests.
CVE-2024-40553MEDIUMCVSS 4.9EG 4.9
2024-07-15
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.
CVE-2024-5911MEDIUMCVSS 4.9EG 4.9
2024-07-10
An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventual…
CVE-2021-29891MEDIUMCVSS 4.9EG 4.9
2022-08-22
IBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity certificate that may cause it to lose network services. IBM X-Force ID: 207221.
CVE-2022-2046MEDIUMCVSS 4.9EG 4.9
2022-08-08
The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but does not check the URL domain it gets the zip files from. This could allow administrators to run c…
CVE-2022-31134MEDIUMCVSS 4.9EG 4.9
2022-07-12
Zulip is an open-source team collaboration tool. Zulip Server versions 2.1.0 above have a user interface tool, accessible only to server owners and server administrators, which provides a way to download a "public data" export. While this …
CVE-2021-27618MEDIUMCVSS 4.9EG 4.9
2021-05-11
The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not check the file type extension of the file uploaded from local source. An attacker could craft a malicious file and u…
CVE-2020-6975MEDIUMCVSS 4.9EG 4.9
2020-02-12
Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a malicious file to the application.
CVE-2019-8140MEDIUMCVSS 4.9EG 4.9
2019-11-06
An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the Media File Storage of the database to tr…
CVE-2019-17536MEDIUMCVSS 4.9EG 4.9
2019-10-13
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/media_upload and fm/move.
CVE-2018-16397MEDIUMCVSS 4.9EG 4.9
2018-09-03
In LimeSurvey before 3.14.7, an admin user can leverage a "file upload" question to read an arbitrary file,
CVE-2018-16373MEDIUMCVSS 4.9EG 4.9
2018-09-03
Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.
CVE-2017-11405MEDIUMCVSS 4.9EG 4.9
2017-07-18
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is c…
CVE-2017-11404MEDIUMCVSS 4.9EG 4.9
2017-07-18
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php.
CVE-2026-81931MEDIUMCVSS 4.8EG 4.8
2026-08-27
Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission (routine Seller role) to execute arbitrary JavaScript …
CVE-2026-79670MEDIUMCVSS 4.8EG 4.8
2026-08-25
Ech0 before 4.4.3 contains a stored cross-site scripting vulnerability in the file upload endpoint that validates Content-Type using only client-supplied headers without server-side inspection. Attackers with admin privileges can upload SV…
CVE-2026-78337MEDIUMCVSS 4.8EG 4.8
2026-08-24
Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the create company and update company permissions to execute arbitrary JavaScript in…
CVE-2026-32278MEDIUMCVSS 4.8EG 4.8
2026-03-23
Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, a Stored Cross-site Scripting (XSS) issue exists in the file field of the Form …
CVE-2025-60187MEDIUMCVSS 4.8EG 4.8
2025-11-06
Unrestricted Upload of File with Dangerous Type vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Using Malicious Files.This issue affects Atarim: from n/a through <= 4.2.1.
CVE-2024-13544MEDIUMCVSS 4.8EG 4.8
2025-02-11
The Zarinpal Paid Download WordPress plugin through 2.3 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in …
CVE-2025-0057MEDIUMCVSS 4.8EG 4.8
2025-01-14
SAP NetWeaver AS JAVA (User Admin Application) is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin can upload a photo with malicious JS content. When a victim visits the vulnerable component, the atta…
CVE-2024-45960MEDIUMCVSS 4.8EG 4.8
2024-10-02
Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting (XSS) attack.
CVE-2024-47528MEDIUMCVSS 4.8EG 4.8
2024-10-01
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Stored Cross-Site Scripting (XSS) can be achieved by uploading a new Background for a Custom Map. Users with "admin" role can set background for a custom map, this…
CVE-2024-3112MEDIUMCVSS 4.8EG 4.8
2024-07-12
The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (f…
CVE-2023-5901MEDIUMCVSS 4.8EG 4.8
2023-11-07
Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
CVE-2023-41626MEDIUMCVSS 4.8EG 4.8
2023-09-15
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface.
CVE-2023-27164MEDIUMCVSS 4.8EG 4.8
2023-03-10
An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file.
CVE-2021-41421MEDIUMCVSS 4.8EG 4.8
2022-06-16
A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel.
CVE-2022-0930MEDIUMCVSS 4.8EG 4.8
2022-03-12
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
CVE-2022-0912MEDIUMCVSS 4.8EG 4.8
2022-03-11
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11.
CVE-2021-46078MEDIUMCVSS 4.8EG 4.8
2022-01-06
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability.
CVE-2024-45962MEDIUMCVSS 4.7EG 4.8
2024-10-02
October 3.6.30 allows an authenticated admin account to upload a PDF file containing malicious JavaScript into the target system. If the file is accessed through the website, it could lead to a Cross-Site Scripting (XSS) attack or execute …
CVE-2026-102263MEDIUMCVSS 4.7EG 4.7
2026-09-29
A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may…
CVE-2026-92247MEDIUMCVSS 4.7EG 4.7
2026-09-16
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. T…
CVE-2026-82629MEDIUMCVSS 4.7EG 4.7
2026-08-31
A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web…
CVE-2026-76995MEDIUMCVSS 4.7EG 4.7
2026-08-20
A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_menu. The manipulation of the argument img leads to unrestricted up…
CVE-2026-19839MEDIUMCVSS 4.7EG 4.7
2026-08-14
A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function save_doctor of the file /save_file.php. The manipulation results in unrestricted upload. The attack can be executed remot…
CVE-2026-19383MEDIUMCVSS 4.7EG 4.7
2026-08-10
A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrest…

Map vulnerabilities like CWE-434 to your infrastructure

EchelonGraph correlates every CVE — across CWE-434 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →