CWE-434

Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the s

PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allo

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Con

A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar w

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php,

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Networ

Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.

The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions su

The WooCommerce Help Scout WordPress plugin before 2.9.1 (https://woocommerce.com/products/woocommerce-help-scout/) allo

Composr 10.0.36 allows upload and execution of PHP files.

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers c

The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the [

The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from th

An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE

The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manua

An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious cod

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges

Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution.

The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Cont

emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/

An issue was discovered on Zebra (formerly Motorola Solutions) Fixed RFID Reader FX9500 devices. An unauthenticated atta

An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.

File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type t

A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.

The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'upload

Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the fil

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the af

Frontier ichris through 5.18 allows users to upload malicious executable files that might later be downloaded and run by

FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background v

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFileP

bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files (ex: php fi

Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-cont

Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, res

The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archiv

Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to pro

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.ph

PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass t

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessibl

Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the p

A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress Wo

A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress Word

ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers ca

An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Man

The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which a

Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows attackers to execute arbitra