Vulnerabilities > Unrestricted Upload of File with Dangerous Type

DATE CVE VULNERABILITY TITLE RISK
2022-07-22 CVE-2022-34115 Unrestricted Upload of File with Dangerous Type vulnerability in Dataease Project Dataease 1.11.1
DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.
network
low complexity
dataease-project CWE-434
critical
9.8
2022-07-21 CVE-2022-28700 Unrestricted Upload of File with Dangerous Type vulnerability in Givewp
Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.
network
low complexity
givewp CWE-434
7.2
2022-07-19 CVE-2022-34024 Unrestricted Upload of File with Dangerous Type vulnerability in Barangay Management System Project Barangay Management System 1.0
Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php.
7.2
2022-07-18 CVE-2022-1565 Unrestricted Upload of File with Dangerous Type vulnerability in Wpallimport WP ALL Import 3.4.6
The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, and including, 3.6.7.
network
low complexity
wpallimport CWE-434
7.2
2022-07-18 CVE-2022-24688 Unrestricted Upload of File with Dangerous Type vulnerability in DSK Dsknet 2.16.136.0/2.17.136.5
An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5.
network
low complexity
dsk CWE-434
8.8
2022-07-16 CVE-2021-36711 Unrestricted Upload of File with Dangerous Type vulnerability in Octobot 0.4.1/0.4.2/0.4.3
WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.
network
low complexity
octobot CWE-434
critical
9.8
2022-07-15 CVE-2021-36461 Unrestricted Upload of File with Dangerous Type vulnerability in Microweber 1.1.3
An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini.
network
low complexity
microweber CWE-434
8.8
2022-07-15 CVE-2022-32119 Unrestricted Upload of File with Dangerous Type vulnerability in Arox School ERP PRO 1.0
Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.
network
low complexity
arox CWE-434
8.8
2022-07-15 CVE-2022-2418 Unrestricted Upload of File with Dangerous Type vulnerability in Eveo Urve web Manager
A vulnerability was found in URVE Web Manager.
low complexity
eveo CWE-434
8.0
2022-07-15 CVE-2022-2419 Unrestricted Upload of File with Dangerous Type vulnerability in Eveo Urve web Manager
A vulnerability was found in URVE Web Manager.
low complexity
eveo CWE-434
8.0