VYPR

CWE-434

Unrestricted Upload of File with Dangerous Type

BaseDraftLikelihood: Medium

Description

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-1

CVEs mapped to this weakness (4,434)

page 48 of 222
  • CVE-2022-37181CriAug 24, 2022
    risk 0.64cvss 9.8epss 0.01

    72crm 9.0 has an Arbitrary file upload vulnerability.

  • CVE-2022-35150CriAug 22, 2022
    Baijiacms Project
    Baijiacms
    risk 0.64cvss 9.8epss 0.01

    Baijicms v4 was discovered to contain an arbitrary file upload vulnerability.

  • CVE-2022-2180CriAug 15, 2022
    Greyd
    Greyd.suite
    risk 0.64cvss 9.8epss 0.03

    The GREYD.SUITE WordPress theme does not properly validate uploaded custom font packages, and does not perform any authorization or csrf checks, allowing an unauthenticated attacker to upload arbitrary files including php source files, leading to possible remote code execution…

  • CVE-2022-35426CriAug 10, 2022
    Ucms
    Ucms
    risk 0.64cvss 9.8epss 0.01

    UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

  • CVE-2022-34613CriAug 2, 2022
    Mealie
    Mealie
    risk 0.64cvss 9.8epss 0.02

    Mealie 1.0.0beta3 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file.

  • CVE-2022-34496CriJul 29, 2022
    Hiby
    R3 Pro Firmware
    risk 0.64cvss 9.8epss 0.01

    Hiby R3 PRO firmware v1.5 to v1.7 was discovered to contain a file upload vulnerability via the file upload feature.

  • CVE-2022-28369CriJul 14, 2022
    Verizon
    Lvskihp Indoorunit Firmware
    risk 0.64cvss 9.8epss 0.01

    Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enable_ssh sub-operation of the crtcrpc JSON listener (found at /lib/functions/wnc_jsonsh/crtcmode.sh) A remote attacker on the local network can provide a…

  • CVE-2022-30216HigJul 12, 2022
    Microsoft
    Windows Server 2003
    risk 0.64cvss 8.8epss 0.89

    Windows Server Service Tampering Vulnerability

  • CVE-2021-29281CriJul 7, 2022
    Gfi
    Archiver
    risk 0.64cvss 9.8epss 0.03

    File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317.

  • CVE-2022-32413CriJul 5, 2022
    Dice Project
    Dice
    risk 0.64cvss 9.8epss 0.02

    An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file.

  • CVE-2022-31943CriJul 1, 2022
    Mcms
    MCMS
    risk 0.64cvss 9.8epss 0.02

    MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.

  • CVE-2021-38945CriJun 24, 2022
    IBM
    Cognos Analytics
    risk 0.64cvss 9.8epss 0.02

    IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validation. IBM X-Force ID: 211238.

  • CVE-2021-40954CriJun 23, 2022
    LaikeTui
    LaikeTui
    risk 0.64cvss 9.8epss 0.02

    Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.

  • CVE-2022-31374CriJun 21, 2022
    SolarView
    Compact
    risk 0.64cvss 9.8epss 0.02

    An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.

  • CVE-2021-40940CriJun 15, 2022
    Monstra
    Monstra
    risk 0.64cvss 9.8epss 0.02

    Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.

  • CVE-2021-42675CriJun 14, 2022
    Kreado
    Kreasfero
    risk 0.64cvss 9.8epss 0.02

    Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.

  • CVE-2022-32019CriJun 2, 2022
    Car Rental Management System Project
    Car Rental Management System
    risk 0.64cvss 9.8epss 0.02

    Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=save_car.

  • CVE-2022-30506CriJun 2, 2022
    Mcms
    MCMS
    risk 0.64cvss 9.8epss 0.03

    An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.

  • CVE-2022-30423CriJun 2, 2022
    Oretnom23
    Merchandise Online Store
    risk 0.64cvss 9.8epss 0.02

    Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.

  • CVE-2022-24239CriJun 2, 2022
    ACEweb
    Online Portal
    risk 0.64cvss 9.8epss 0.01

    ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.