1049
Language : ASP.NET (Prevalence = Sometimes)
Language : PHP (Prevalence = Often)
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Web Server (Prevalence = Sometimes)
Alternate Terms
Unrestricted File Upload : Used in vulnerability databases and elsewhere, but it is insufficiently
precise. The phrase could be interpreted as the lack of restrictions on the size or number of
uploaded files, which is a resource consumption issue.
Likelihood Of Exploit
Medium
Common Consequences
Scope Impact Likelihood
Integrity
Confidentiality
Availability
Execute Unauthorized Code or Commands
Arbitrary code execution is possible if an uploaded file is
interpreted and executed as code by the recipient. This
is especially true for .asp and .php extensions uploaded
to web servers because these file types are often treated
as automatically executable, even when file system
permissions do not specify execution. For example, in Unix
environments, programs typically cannot run unless the
execute bit is set, but PHP programs may be executed
by the web server without directly invoking them on the
operating system.
Detection Methods
Dynamic Analysis with Automated Results Interpretation
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Web Application Scanner Web Services Scanner Database Scanners
Effectiveness = SOAR Partial
Dynamic Analysis with Manual Results Interpretation
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Fuzz Tester Framework-based Fuzzer
Effectiveness = SOAR Partial
Manual Static Analysis - Source Code
According to SOAR, the following detection techniques may be useful: Highly cost effective:
Focused Manual Spotcheck - Focused manual analysis of source Manual Source Code Review
(not inspections)
Effectiveness = High
Automated Static Analysis - Source Code
According to SOAR, the following detection techniques may be useful: Highly cost effective:
Source code Weakness Analyzer Context-configured Source Code Weakness Analyzer
Effectiveness = High
Architecture or Design Review
According to SOAR, the following detection techniques may be useful: Highly cost effective:
Formal Methods / Correct-By-Construction Cost effective for partial coverage: Inspection (IEEE
1028 standard) (can apply to requirements, design, source code, etc.)
CWE Version 4.14
CWE-434: Unrestricted Upload of File with Dangerous Type
CWE-434: Unrestricted Upload of File with Dangerous Type