← Back
CWE-434

4,365 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

JSON object

Loading...

CVEs (4,365)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-11357
2Progress
Telerik
2Telerik Ui For Asp.net Ajax
Ui For Asp.net Ajax
Aug 14, 2026
Aug 23, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
CVE-2017-3108
1Adobe
1Experience Manager
May 13, 2026
Aug 11, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability.
CVE-2017-11154
1Synology
1Photo Station
May 13, 2026
Aug 8, 2017
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts via the type parameter.
CVE-2017-12678
2Debian
Taglib
2Debian Linux
Taglib
May 13, 2026
Aug 8, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via...Show more
In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file.Show less
CVE-2015-7571
1Yeager
1Yeager Cms
May 13, 2026
Aug 7, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
CVE-2017-11756
1Earcms
1Ear Music
May 13, 2026
Jul 30, 2017
N/A· v4
7.0 HIGH· v3
6.0 MEDIUM· v2
In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to include .php in addition to .mp3 and .m4a in admin.php?iframe...Show more
In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to include .php in addition to .mp3 and .m4a in admin.php?iframe=config_upload, and then using user.php/music/add/ to upload the code.Show less
CVE-2015-4463
1Efrontlearning
1Efront
May 13, 2026
Jul 25, 2017
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended file-upload restrictions by appending a crafted parameter to the file URL.
CVE-2015-4462
1Efrontlearning
1Efront
May 13, 2026
Jul 25, 2017
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via a full pathname in the "Upload file from url" field in the f...Show more
Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via a full pathname in the "Upload file from url" field in the file manager for professor.php.Show less
CVE-2017-11326
1Tilde Cms Project
1Tilde Cms
May 13, 2026
Jul 24, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation.
CVE-2017-11466
1Dotcms
1Dotcms
May 13, 2026
Jul 20, 2017
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal...Show more
Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal sequences in the fieldName parameter to servlets/ajax_file_upload. This results in arbitrary code execution by requesting the .jsp file at a /assets URI.Show less
CVE-2017-11405
1Cmsmadesimple
1Cms Made Simple
May 13, 2026
Jul 18, 2017
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in wh...Show more
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file.Show less
CVE-2017-11404
1Cmsmadesimple
1Cms Made Simple
May 13, 2026
Jul 18, 2017
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php.
CVE-2017-1000081
1Onosproject
1Onos
May 13, 2026
Jul 17, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.
CVE-2017-6041
1Marel
22A320 Firmware
A325 FirmwareA371 Firmware+19 more
May 13, 2026
Jun 30, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC...Show more
An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520, P574, SensorX13 QC flow line, SensorX23 QC Master, SensorX23 QC Slave, Speed Batcher, T374, T377, V36, V36B, and V36C; M3210 terminal associated with the same systems as the M3000 terminal identified above; M3000 desktop software associated with the same systems as the M3000 terminal identified above; MAC4 controller associated with the same systems as the M3000 terminal identified above; SensorX23 X-ray machine; SensorX25 X-ray machine; and MWS2 weighing system. This vulnerability allows an attacker to modify the operation and upload firmware changes without detection.Show less
CVE-2017-9840
1Dolibarr
1Dolibarr
May 13, 2026
Jun 25, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.
CVE-2017-4990
1Emc
1Avamar Server
May 13, 2026
Jun 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any d...Show more
In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system.Show less
CVE-2017-9380
1Open Emr
1Openemr
May 13, 2026
Jun 2, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.
CVE-2017-9364
1Bigtreecms
1Bigtree Cms
May 13, 2026
Jun 2, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Unrestricted File Upload exists in BigTree CMS through 4.2.18: if an attacker uploads an 'xxx.pht' or 'xxx.phtml' file, they could bypass a safety check and execute any code.
CVE-2015-4455
1Aviary Image Editor Add On For Gravity Forms Project
1Aviary Image Editor Add On For Gravity Forms
May 13, 2026
May 23, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with a...Show more
Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/gform_aviary.Show less
CVE-2017-9101
1Playsms
1Playsms
May 13, 2026
May 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file.