Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

CVEs (4,365)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-7452 1Exponentcms 1Exponent Cms May 6, 2026 Nov 3, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory traversal.
CVE-2016-7095 1Exponentcms 1Exponent Cms May 6, 2026 Nov 3, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution.
CVE-2015-1000013 1Csv2wpec Coupon Project 1Csv2wpec Coupon May 6, 2026 Oct 6, 2016 N/A· v4 7.8 HIGH· v3 5.0 MEDIUM· v2 Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1
CVE-2015-1000001 1Fast Image Adder Project 1Fast Image Adder May 6, 2026 Oct 6, 2016 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin
CVE-2015-1000000 1Mailcwp Project 1Mailcwp May 6, 2026 Oct 6, 2016 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Remote file upload vulnerability in mailcwp v1.99 wordpress plugin
CVE-2016-5050 1Readydesk 1Readydesk May 6, 2026 Aug 26, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file.
CVE-2016-2914 1Ibm 1Engineering Lifecycle Optimization Publishing May 6, 2026 Aug 8, 2016 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected fi...Show more Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension.Show less
CVE-2016-3088 1Apache 1Activemq Apr 21, 2026 Jun 1, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
CVE-2015-4524 1Emc 5Documentum Administrator Documentum Digital Asset ManagerDocumentum Taskspace+2 more May 6, 2026 Jul 4, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and...Show more Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server.Show less
CVE-2015-0702 1Cisco 1Unified Meetingplace May 6, 2026 Apr 21, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName paramet...Show more Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712.Show less
CVE-2006-6994 1Indirmax.org 1Ozzywork Galeri Apr 23, 2026 Feb 12, 2007 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP files by removing the client-side security checks.
CVE-2006-5845 1Speedywiki 1Speedywiki Apr 23, 2026 Nov 10, 2006 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1.
CVE-2006-4558 1Deluxebb 1Deluxebb Apr 16, 2026 Sep 6, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a ne...Show more DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php.Show less
CVE-2006-4471 1Joomla 1Joomla Apr 16, 2026 Aug 31, 2006 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors.
CVE-2006-2428 1Duware Dubanner Project 1Duware Dubanner Apr 16, 2026 May 17, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some...Show more add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw source is vague.Show less
CVE-2005-3288 1Rockliffe 1Mailsite Express Apr 16, 2026 Oct 23, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before...Show more Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.Show less
CVE-2005-1868 1Yvesglodt 1I Man Apr 16, 2026 Jun 9, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension.
CVE-2005-1881 1Yapig 1Yapig Apr 16, 2026 Jun 6, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code.
CVE-2005-0254 1Guillaumegardey 1Biborb Apr 16, 2026 May 2, 2005 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF...Show more BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files.Show less
CVE-2004-2262 1E107 1E107 Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php.

Previous 1...215 216 217218219 Next