Unrestricted file upload.

Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch

• wpdevteam Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!
• Unrestricted file upload

MaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Upload via 'resumableFilename' Parameter

• sadathimel MaxUpload – Big File Uploads – Increase Maximum File Upload Size
• Unrestricted file upload

SourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted upload

• SourceCodester Simple Doctors Appointment System
• Broken access control
• Unrestricted file upload

Unrestricted file upload in Dell Wyse Management Suite (WMS)

• Dell Wyse Management Suite (WMS)
• Unrestricted file upload

Unrestricted file upload in Dell Wyse Management Suite (WMS)

• Dell Wyse Management Suite (WMS)
• Unrestricted file upload

WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)

• SMEWebify WebErpMesv2
• Authentication bypass
• Unrestricted file upload

WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.

• Progress Software Corporation WhatsUp Gold
• Path traversal
• Unrestricted file upload

WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection

• WooCommerce Subscriptions
• Unrestricted file upload

Gift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File Upload

• giftware
• Unrestricted file upload

Malcolm vulnerable to RCE via unrestricted .php upload to the file-upload component

• cisagov Malcolm
• Unrestricted file upload

InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure

• InstaWP Connect – 1-click WP Staging & Migration
• Unrestricted file upload

Cockpit CMS Cockpit CMS - Unrestricted File Upload

• Cockpit CMS
• Unrestricted file upload

Wildfly-core: wildfly: arbitrary file read via malicious archive deployment

• Red Hat Fuse 7
• Red Hat JBoss Enterprise Application Platform 7
• Unrestricted file upload

dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload

• dulldusk phpfm
• Unrestricted file upload

Product Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File Upload

• Product Input Fields for WooCommerce
• Unrestricted file upload

Squeeze < 1.7.12 - Author+ Arbitrary File Upload

• Squeeze
• Unrestricted file upload

saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload

• saithink SaiAdmin
• saigroup SaiAdmin
• Broken access control
• Unrestricted file upload

CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules

• Unrestricted file upload

<4.7.4 · fixed in 4.7.4

SourceCodester Photo Share Website ajax.php save_upload unrestricted upload

• SourceCodester Photo Share Website
• Broken access control
• Unrestricted file upload

Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

• Weaver Network Co., Ltd. E-cology 9.0
• Unrestricted file upload

Statamic: Missing file upload validation on frontend forms allows uploading disallowed file types

• Unrestricted file upload

<5.74.3 || >=6.0.0, <6.24.2 · fixed in 5.74.3, 6.24.2

Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Token

• DataLinkDC Dinky
• Unrestricted file upload

SourceCodester Online Examination & Learning Management System upload_files.php unrestricted upload

• SourceCodester Online Examination & Learning Management System
• Broken access control
• Unrestricted file upload

Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution

• WSO2 API Manager
• WSO2 Traffic Manager
• Unrestricted file upload

WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability

• Brandexponents Type Hub
• Unrestricted file upload

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module.

• Unrestricted file upload

Rongzhitong Visual Integrated Command and Dispatch Platform upload unrestricted upload

• Rongzhitong Visual Integrated Command and Dispatch Platform
• Broken access control
• Unrestricted file upload

imranrisal-dev Student-Management-System Shared Upload Helper student_profile_pic.php storeProfileImage unrestricted upload

• imranrisal-dev Student-Management-System
• Broken access control
• Unrestricted file upload

wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal

• wp-downloadmanager
• Unrestricted file upload

Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist

• pluck-cms Pluck CMS
• Unrestricted file upload

LightSync Pro <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload

• lightsyncpro LightSync Pro – Connect & Sync Cloud Assets | Lightroom, Canva, Figma, Dropbox & Shutterstock
• Unrestricted file upload

Zportals < 6.3.4 - Subscriber+ Arbitrary File Upload

• zportals
• Unrestricted file upload

Ghost: File Upload Content-Type Spoofing

• Unrestricted file upload

>=6.19.4, <6.21.1 · fixed in 6.21.1

CVAT has stored XSS via annotation guide assets

• cvat
• Cross-site scripting (XSS)
• Unrestricted file upload

Trippo ResponsiveFilemanager dialog.php unrestricted upload

• Trippo ResponsiveFilemanager
• Broken access control
• Unrestricted file upload

Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources

• Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
• Unrestricted file upload

Unrestricted file upload in refirio freo2

• refirio freo2
• Unrestricted file upload

Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint

• Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat
• Unrestricted file upload

ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

• Improve SEO
• Unrestricted file upload

WebsiteBaker CMS < 2.13.10 File Upload RCE via Module Installation

• WebsiteBaker Org e.V. WebsiteBaker CMS
• Unrestricted file upload

OpenEMR Authenticated SQL Injection via backup.php Import Feature

• openemr
• Unrestricted file upload

Personal QR Message <= 1.0 - Unauthenticated Arbitrary File Upload

• Personal QR Message
• Unrestricted file upload

Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File Upload

• Insert or Embed Articulate Content into WordPress
• Unrestricted file upload

Webinfos <= 1.2 - Unauthenticated Arbitrary File Upload

• Webinfos
• Unrestricted file upload

Theme Demo Import <= 1.1.3 - Admin+ Arbitrary File Upload

• Theme Demo Import
• Unrestricted file upload

Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload

• Everest Toolkit
• Unrestricted file upload

Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers

• Unrestricted file upload

>=5.18.2, <5.21.1 · fixed in 5.21.1

FMS Employee Allows Upload of Unrestricted Files

• Johnson Controls FM Systems Employee
• Unrestricted file upload

Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload

• Realtyna Organic IDX plugin + WPL Real Estate
• Unrestricted file upload

Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command

• Realtyna Organic IDX plugin + WPL Real Estate
• Unrestricted file upload

Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload

• wolfcms
• Unrestricted file upload

JupiCore does not perform validation of firmware

• Phoenix Contact CHARX SEC-3150
• Phoenix Contact CHARX SEC-3100
• Unrestricted file upload

File Upload vulnerability

• Phoenix Contact CHARX SEC-3150
• Phoenix Contact CHARX SEC-3100
• Unrestricted file upload

Admin and Site Enhancements (ASE) Pro <= 8.9.0 - Unauthenticated Remote Code Execution via PHP Code Injection via cfgroup[input] Repeater Row Key

• Admin and Site Enhancements (ASE) Pro
• Unrestricted file upload

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2

• balbooa.com Gridbox extension for Joomla
• Unrestricted file upload

Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) <= 2.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settings

• ThemeComplete Extra Checkout Options - addon for Extra Product Options plugin
• Unrestricted file upload

Unrestricted image upload vulnerability

• Three Learning Koollab LMS
• Unrestricted file upload

Unrestricted SCORM file upload vulnerability

• Koollab LMS
• Unrestricted file upload

Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter

• smub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
• Unrestricted file upload

Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

• Realtyna Organic IDX plugin + WPL Real Estate
• Unrestricted file upload