1054
Reference Description
CVE-2004-2262 improper type checking of uploaded files
https://www.cve.org/CVERecord?id=CVE-2004-2262
CVE-2006-4558 Double "php" extension leaves an active php extension in the generated
filename.
https://www.cve.org/CVERecord?id=CVE-2006-4558
CVE-2006-6994 ASP program allows upload of .asp files by bypassing client-side checks
https://www.cve.org/CVERecord?id=CVE-2006-6994
CVE-2005-3288 ASP file upload
https://www.cve.org/CVERecord?id=CVE-2005-3288
CVE-2006-2428 ASP file upload
https://www.cve.org/CVERecord?id=CVE-2006-2428
Functional Areas
• File Processing
Affected Resources
• File or Directory
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 714 OWASP Top Ten 2007 Category A3 - Malicious File
Execution
629 2331
MemberOf 801 2010 Top 25 - Insecure Interaction Between
Components
800 2354
MemberOf 813 OWASP Top Ten 2010 Category A4 - Insecure Direct
Object References
809 2357
MemberOf 864 2011 Top 25 - Insecure Interaction Between
Components
900 2371
MemberOf 884 CWE Cross-section 884 2567
MemberOf 1131 CISQ Quality Measures (2016) - Security 1128 2442
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
MemberOf 1308 CISQ Quality Measures - Security 1305 2485
MemberOf 1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous
Software Weaknesses
1337 2589
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1348 OWASP Top Ten 2021 Category A04:2021 - Insecure
Design
1344 2491
MemberOf 1350 Weaknesses in the 2020 CWE Top 25 Most Dangerous
Software Weaknesses
1350 2594
MemberOf 1364 ICS Communications: Zone Boundary Failures 1358 2501
MemberOf 1387 Weaknesses in the 2022 CWE Top 25 Most Dangerous
Software Weaknesses
1387 2597
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
MemberOf 1425 Weaknesses in the 2023 CWE Top 25 Most Dangerous
Software Weaknesses
1425 2600
Notes
Relationship
CWE Version 4.14
CWE-435: Improper Interaction Between Multiple Correctly-Behaving Entities
CWE-435: Improper Interaction Between Multiple Correctly-Behaving Entities