CWE-434

Medium likelihood

Unrestricted Upload of File with Dangerous Type

Parent: CWE-669 - Incorrect Resource Transfer Between Spheres

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

4,018 vulnerabilities with CWE-434

CVE-2020-26629 CRITICAL

Hospital Management System V4.0 - Code Injection

CVSS 9.8

CVE-2020-36706 CRITICAL

Simple:Press - WordPress Forum Plugin <6.6.0 - RCE

CVSS 9.8

CVE-2020-18912 CRITICAL

Ear App <20181124 - RCE

CVSS 9.8

CVE-2020-36082 CRITICAL

Bloofoxcms - Unrestricted File Upload

Evertz 3080ipx Firmware - Unrestricted File Upload

CVSS 8.8

CVE-2020-21861 HIGH

Duxcms - Unrestricted File Upload

CVSS 8.8

CVE-2020-22153 CRITICAL

Thedaylightstudio Fuel Cms - Unrestricted File Upload

CVSS 9.8

CVE-2020-22151 CRITICAL

Thedaylightstudio Fuel Cms - Unrestricted File Upload

CVSS 9.8

CVE-2020-18432 CRITICAL

SEMCMS PHP 3.7 - Privilege Escalation

CVSS 9.8

CVE-2020-20210 HIGH

Bludit - Unrestricted File Upload

CVSS 8.8

CVE-2020-21489 CRITICAL

Feehicms < 2.0.8.1 - Unrestricted File Upload

CVSS 9.8

CVE-2020-21474 CRITICAL

Nucleuscms - Unrestricted File Upload

CVSS 9.8

CVE-2020-21325 HIGH

Wuzhicms - Unrestricted File Upload

CVSS 8.8

CVE-2020-21174 CRITICAL

Feehicms < 2.0.8.1 - Unrestricted File Upload

CVSS 9.8

CVE-2020-20969 HIGH

Pluck - Unrestricted File Upload

CVSS 7.2

CVE-2020-20919 HIGH

Pluck - Unrestricted File Upload

CVSS 7.2

CVE-2020-20735 CRITICAL

8cms Ljcms - Unrestricted File Upload

CVSS 9.8

CVE-2020-20718 CRITICAL

Pluck-cms Pluckcms - Unrestricted File Upload

CVSS 9.8

CVE-2020-20067 HIGH

Ebcms - Unrestricted File Upload

CVSS 8.8

CVE-2020-36705 CRITICAL

Adning Advertising <1.5.5 - RCE

CVSS 9.8

CVE-2020-36701 HIGH

KingComposer <2.9.3 - Code Injection

CVSS 8.8

CVE-2020-19028 HIGH

EmlogCMS 6.0.0 - Info Disclosure

CVE-2020-19802 CRITICAL

Doyocms - Unrestricted File Upload

CVSS 9.8

Details

Vulnerabilities 4,018

Exploit Likelihood Medium

Links