Vulnerabilities (CVE)

Filtered by CWE-434
Total 2765 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-9187 1 Moodle 1 Moodle 2016-11-29 6.5 MEDIUM 8.8 HIGH
Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.
CVE-2016-9268 1 Dotclear 1 Dotclear 2016-11-29 9.0 HIGH 7.2 HIGH
Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified vectors.
CVE-2016-5050 1 Readydesk 1 Readydesk 2016-11-28 7.5 HIGH 9.8 CRITICAL
Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file.
CVE-2015-1000013 1 Csv2wpec-coupon Project 1 Csv2wpec-coupon 2016-11-28 5.0 MEDIUM 7.8 HIGH
Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1
CVE-2015-1000000 1 Mailcwp Project 1 Mailcwp 2016-10-27 5.0 MEDIUM 9.8 CRITICAL
Remote file upload vulnerability in mailcwp v1.99 wordpress plugin