Weaknesses of type CWE-434

3,091 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2022-2678MEDIUMSourceCodester Alphaware Simple E-Commerce System Background Management Page admin_feature.php unrestricted uploadEPSS 0.8%CVE-2026-40040HIGHPachno 1.0.6 Unrestricted File Upload Remote Code ExecutionEPSS 0.8%CVE-2022-2909MEDIUMSourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted uploadEPSS 0.8%CVE-2026-61457MEDIUMGrav before 1.0.3 Remote Code Execution via File Upload Extension BypassEPSS 0.8%CVE-2025-2780HIGHWoffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2024-10590HIGHOpt-In Downloads <= 4.07 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2024-11018CRITICALGrand Vice info Webopac - Arbitrary File UploadEPSS 0.8%CVE-2024-2148MEDIUMSourceCodester Online Mobile Management Store Users.php unrestricted uploadEPSS 0.8%CVE-2023-5284MEDIUMSourceCodester Engineers Online Portal upload_save_student.php unrestricted uploadEPSS 0.8%CVE-2023-40204CRITICALWordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File UploadEPSS 0.8%CVE-2024-11661MEDIUMCodezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted uploadEPSS 0.8%CVE-2023-7061HIGHAdvanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2026-19089CRITICALProduct Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2023-2419MEDIUMZhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted uploadEPSS 0.8%CVE-2026-15039CRITICALGift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2026-13714CRITICALRealtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code ExecutionEPSS 0.8%CVE-2026-16250CRITICALPersonal QR Message <= 1.0 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2024-28147HIGHUnrestricted Upload of Files in edu-sharingEPSS 0.8%CVE-2026-16618CRITICALImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code ExecutionEPSS 0.8%CVE-2020-37113HIGHGUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension BypassEPSS 0.8%