VYPR

CWE-616

Incomplete Identification of Uploaded File Variables (PHP)

VariantIncomplete

Description

The PHP application uses an old method for processing uploaded files by referencing the four global variables that are set for each file (e.g. $varname, $varname_size, $varname_name, $varname_type). These variables could be overwritten by attackers, causing the application to process unauthorized files.

These global variables could be overwritten by POST requests, cookies, or other methods of populating or overwriting these variables. This could be used to read or process arbitrary files by providing values such as "/etc/passwd".

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (10)

  • CVE-2025-67084CriJan 15, 2026
    risk 0.64cvss 9.9epss 0.00

    File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which can later be executed remotely, leading to Remote Code Execution (RCE).

  • CVE-2024-31601CriApr 26, 2024
    risk 0.64cvss 9.8epss 0.00

    An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via the exportpdf.php component.

  • CVE-2024-29858CriMar 21, 2024
    risk 0.64cvss 9.8epss 0.00

    In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload.

  • CVE-2023-38947HigAug 3, 2023
    risk 0.47cvss 7.2epss 0.01

    An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file.

  • CVE-2024-28520MedApr 4, 2024
    risk 0.42cvss 6.5epss 0.00

    File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component.

  • CVE-2025-59402MedSep 25, 2025
    risk 0.35cvss 5.4epss 0.00

    Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security…

  • CVE-2025-52130MedAug 25, 2025
    risk 0.35cvss 5.4epss 0.00

    File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to upload arbitrary files, including PHP scripts, which can be accessed via direct GET requests, potentially resulting in remote…

  • CVE-2024-52305MedNov 13, 2024
    risk 0.35cvss 6.5epss 0.00

    UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowing the creation of a new admin account with an option to upload a profile image. An attacker can upload a malicious SVG…

  • CVE-2026-67198HigAug 4, 2026
    risk 0.00cvss 7.5epss 0.00

    Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as…

  • CVE-2026-22789MedJan 12, 2026
    risk 0.00cvss 5.4epss 0.00

    WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to 1.19, WebErpMesv2 contains a file upload validation bypass vulnerability in multiple controllers that allows authenticated users to upload arbitrary files, including PHP scripts,…