CWE-434

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload (combined with Path Traversal).

Unrestricted file upload in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to upload any file wi

Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php.

The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in t

The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads in a

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in

The web management interface of Okcat Parking Management Platform from ZONG YU has an Arbitrary File Upload vulnerabilit

The 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type v

Emlog is an open source website building system. Emlog Pro prior to version 2.5.10 contains a file upload vulnerability.

The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to mis

The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type v

The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, the application does not check o

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Res

An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execut

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the use

The Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads

Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability

The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ima

The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2

The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerab

An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via th

The WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet theme for WordPres

An arbitrary file upload vulnerability in the is_allowed_file_type() function of Filemanager v2.3.0 allows attackers to

The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation vi

The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati

The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation

The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type vali

In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to on

The FoxyPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the up

The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing fi

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inje

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inje

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inje

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inje

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inje

The Ebook Store plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the

The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ima

ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admi

An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.

FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbit

CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow crafted dangerous file

Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx

The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in

The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42

The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2

An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload f

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arb

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arb