CWE-616 · Cryptography
Incomplete Identification of Uploaded File Variables (PHP)
8CVEs
SortMost likely exploited
8 CVEs with CWE-616 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-38947An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file.Wbce · Wbce Cms · CVSS 7.2 · 2023-08-03 | 7.2 | 0.5% | 2023-08-03 |
| CVE-2025-67084File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which can later be executed remotely, leadin…Invoiceplane · Invoiceplane · CVSS 9.9 · 2026-01-15 | 9.9 | 0.4% | 2026-01-15 |
| CVE-2024-29858In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload.Misp-Project · Misp · CVSS 9.8 · 2024-03-21 | 9.8 | 0.4% | 2024-03-21 |
| CVE-2024-31601An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via the exportpdf.php co…No vendor recorded · CVSS 9.8 · 2024-04-26 | 9.8 | 0.4% | 2024-04-26 |
| CVE-2026-67198Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcherperspective-dev · perspective · CVSS 7.5 · 2026-08-04 | 7.5 | 0.3% | 2026-08-04 |
| CVE-2025-59402Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physi…Flocksafety · Bravo Compute Box Firmware · CVSS 5.4 · 2025-09-25 | 5.4 | 0.2% | 2025-09-25 |
| CVE-2025-52130File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to upload arbitrary files, i…No vendor recorded · CVSS 5.4 · 2025-08-25 | 5.4 | 0.2% | 2025-08-25 |
| CVE-2024-52305UnoPim Stored XSS : Cookie hijacking through Create User functionunopim · unopim · CVSS 6.5 · 2024-11-13 | 6.5 | 0.2% | 2024-11-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.