Falhas do tipo CWE-434

3.097 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2026-7238MEDIUMcode-projects Online Music Site AdminUpdateAlbum.php unrestricted uploadEPSS 0.4%CVE-2026-6561MEDIUMEyouCMS Index.php edit_adminlogo unrestricted uploadEPSS 0.4%CVE-2026-7134MEDIUMcode-projects Online Lot Reservation System edithousepic.php unrestricted uploadEPSS 0.4%CVE-2024-13134MEDIUMZeroWdd studentmanager TeacherController. java editTeacher unrestricted uploadEPSS 0.4%CVE-2026-19383MEDIUMsaithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted uploadEPSS 0.4%CVE-2026-5576MEDIUMSourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted uploadEPSS 0.4%CVE-2026-4875MEDIUMitsourcecode Free Hotel Reservation System index.php unrestricted uploadEPSS 0.4%CVE-2026-7578MEDIUMMacCMS Pro Plugin Installation add.html install unrestricted uploadEPSS 0.4%CVE-2026-6650MEDIUMZ-BlogPHP ZBA File app_upload.php UnPack unrestricted uploadEPSS 0.4%CVE-2026-15518MEDIUMAREA 17 Twill CMS Media Library Insert FileLibraryController.php storeFile unrestricted uploadEPSS 0.4%CVE-2026-7393MEDIUMSourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted uploadEPSS 0.4%CVE-2026-7673MEDIUMcrmeb_java Admin Upload UploadServiceImpl.java unrestricted uploadEPSS 0.4%CVE-2026-16226MEDIUMSourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted uploadEPSS 0.4%CVE-2025-14582MEDIUMcampcodes Online Student Enrollment System index.php unrestricted uploadEPSS 0.4%CVE-2025-8965MEDIUMlinlinjava litemall Endpoint AdminStorageController.java create unrestricted uploadEPSS 0.4%CVE-2025-65844HIGHEverShop 2.0.1 allows a remote unauthenticated attacker to upload arbitrary files and create directories via the /api/images endpoint. The eEPSS 0.4%CVE-2023-30962MEDIUMStored XSS in cerberus attachmentsEPSS 0.4%CVE-2025-15110MEDIUMjackq XCMS Backend ProductImageController.class.php upload unrestricted uploadEPSS 0.4%CVE-2026-46392HIGHHAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload ValidationEPSS 0.4%CVE-2024-41731LOWMultiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence PlatformEPSS 0.4%