On this page
CWE-284: Improper Access Control
Weakness Summary
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
- Canonical source: MITRE CWE-284 (opens in a new tab)
- Published Atomicorp CVE observations: 142
- Distinct affected products in those observations: 120
- Active Atomicorp rules associated with this weakness: 73
Atomicorp Research Context
Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.
The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.
A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.
Selected Published CVE Observations
| CVE | Vulnerability | Product | Atomicorp finding | Observed rules |
|---|---|---|---|---|
| CVE-2026-34234 | CtrlPanel <= 1.1.1 - Remote Code Execution | ctrlpanel | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344362 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-41900 | OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment | openlearnx | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 390109 , 393655 |
| CVE-2026-48907 | Joomla! JCE extension < 2.9.99.5 unauthenticated RCE | jce | Protected by Atomicorp rules | 333360 , 383871 |
| CVE-2026-54745 | Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENAB | pipelines | Protected by Atomicorp rules | 337109 , 337110 , 340162 , 340163 , 340165 , 344360 , 347009 , 390722 , 398001 , 398008 , 398021 , 398022 |
| CVE-2014-9148 | Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities | fiyo cms | Protected by Atomicorp rules | 340007 , 340156 , 341145 , 344360 , 380026 , 380122 , 390709 , 390720 , 390726 , 392647 |
| CVE-2019-1619 | Cisco Data Center Network Manager Unauthenticated Remote Code Execution | data center network manager | Protected by Atomicorp rules | 330791 , 334168 , 340128 , 340152 , 344360 , 360152 , 380018 , 390709 , 390801 |
| CVE-2019-2729 | Oracle WebLogic Server Administration Console - Remote Code Execution | communications diameter signaling router | Protected by Atomicorp rules | 344361 , 344370 , 393655 |
| CVE-2021-24215 | Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation | controlled admin access | Detected by Atomicorp rules | 377360 |
| CVE-2023-27350 | PaperCut PaperCutNG Authentication Bypass | papercut mf | Protected by Atomicorp rules | 344370 , 390727 , 392648 |
| CVE-2024-27348 | Apache HugeGraph Unauthenticated Remote Code Execution (CVE-2024-27348) | hugegraph | Protected by Atomicorp rules | 330791 , 337209 , 337211 , 340152 , 344361 , 344362 , 344363 , 380026 |
| CVE-2026-35616 | FortiClient EMS - Authentication Bypass | forticlient ems | Protected by Atomicorp rules | 392301 |
| CVE-2026-65760 | Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0 | Easy Store extension for Joomla | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-50006 | Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in | anyquery | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 390501 , 390709 , 390716 , 390904 , 393655 |
| CVE-2026-43945 | FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection | FUXA | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2015-0104 | IBM Tivoli Service Automation Manager 7.2.4 - Remote Code Execution | change and configuration management database | Protected by Atomicorp rules | 392301 |
| CVE-2017-5254 | Cambium ePMP 1000 Account Password Reset | epmp 1000 firmware | Protected by Atomicorp rules | 340362 |
| CVE-2018-5406 | KACE System Management Appliance (SMA) < 9.0.270 - Multiple Vulnerabilities | kace systems management appliance firmware | Protected by Atomicorp rules | 390727 , 392301 , 392648 |
| CVE-2022-0824 | Webmin File Manager RCE | webmin | Protected by Atomicorp rules | 340128 , 340133 , 360152 , 380018 , 390801 , 392647 |
| CVE-2023-0916 | Auto Dealer Management System 1.0 - Broken Access Control Exploit | auto dealer management system | Detected by Atomicorp rules | 345493 |
| CVE-2023-4169 | Ruijie RG-EW1200G Router - Password Reset | rg-ew1200g firmware | Protected by Atomicorp rules | 392301 |
| CVE-2026-57855 | Cockpit CMS Missing Authorization in Bucket File Storage API | Cockpit CMS | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-65759 | Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 | Easy Store extension for Joomla | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2023-26360 | Adobe ColdFusion Local File Inclusion Leads to RCE (CVE-2023-26360) | coldfusion | Protected by Atomicorp rules | 340007 , 344360 , 344370 , 350147 , 390709 |
| CVE-2026-73664 | FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module | backup | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-39364 | Vite Dev Server - Directory Traversal | vite | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2014-3120 | ElasticSearch Remote Code Execution (CVE-2014-3120) | elasticsearch | Protected by Atomicorp rules | 330791 , 340152 , 344360 , 344362 , 344370 , 380026 , 390724 |
| CVE-2015-1000010 | WordPress Simple Image Manipulator < 1.0 - Local File Inclusion | simple-image-manipulator | Protected by Atomicorp rules | 337473 , 344360 , 347009 , 390709 |
| CVE-2025-30208 | Vite Development Server Arbitrary File Read Bypass (CVE-2025-30208) | vite | Protected by Atomicorp rules | 347009 , 390709 |
| CVE-2025-31125 | Vite Development Server - Path Traversal | vite | Protected by Atomicorp rules | 347009 , 390709 , 390716 |
| CVE-2026-54629 | Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode | anyquery | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2024-20767 | CVE-2024-20767 - Adobe Coldfusion Arbitrary File Read | coldfusion | Protected by Atomicorp rules | 340006 , 340007 , 344360 , 347009 , 390709 , 390719 |
| CVE-2026-116236 | Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload | Pugongying X5 Pro | Protected by Atomicorp rules | 351000 |
| CVE-2026-90603 | Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload | Open-Generative-AI | Protected by Atomicorp rules | 351000 |
| CVE-2025-28367 | mojoPortal <=2.9.0.1 - Directory Traversal | mojoportal | Protected by Atomicorp rules | 340007 , 344360 , 390709 |
| CVE-2026-31978 | motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint | motioneye | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2025-10600 | SourceCodester Online Exam Form Submission register.php unrestricted upload | online exam form submission | Protected by Atomicorp rules | 351000 |
| CVE-2025-11318 | Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 uploadWxFile.do unrestricted upload | data leakage prevention system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11656 | ProjectsAndPrograms School Management System editNotes.php unrestricted upload | school management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11657 | ProjectsAndPrograms School Management System createNotice.php unrestricted upload | school management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11658 | ProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload | school management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11659 | ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload | school management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11660 | ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload | school management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-12301 | code-projects Simple Food Ordering System editproduct.php unrestricted upload | simple food ordering system | Protected by Atomicorp rules | 351000 |
| CVE-2025-12378 | code-projects Simple Food Ordering System addproduct.php unrestricted upload | simple food ordering system | Protected by Atomicorp rules | 351000 |
| CVE-2025-14528 | D-Link DIR-803 - Authentication Bypass | dir-803 firmware | Protected by Atomicorp rules | 390722 |
| CVE-2025-14583 | campcodes Online Student Enrollment System register.php unrestricted upload | online student enrollment system | Protected by Atomicorp rules | 351000 |
| CVE-2025-15109 | jackq XCMS upload.php unrestricted upload | XCMS | Protected by Atomicorp rules | 351000 |
| CVE-2025-9772 | RemoteClinic edit.php unrestricted upload | remote clinic | Protected by Atomicorp rules | 351000 |
| CVE-2025-9775 | RemoteClinic edit-my-profile.php unrestricted upload | remote clinic | Protected by Atomicorp rules | 351000 |
| CVE-2026-0643 | projectworlds House Rental and Property Listing Signup register.php unrestricted upload | house rental and property listing project | Protected by Atomicorp rules | 351000 |
| CVE-2026-104637 | onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload | HospitalManagementSystem | Protected by Atomicorp rules | 351000 , 390501 |
| CVE-2026-11344 | code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload | Vehicle Management System | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-114259 | oretnom23 file-management-system-php admin_class.php save_files unrestricted upload | file-management-system-php | Protected by Atomicorp rules | 351000 |
| CVE-2026-11474 | Kushan2k student-management-system Registration Endpoint RegisterService.php unrestricted upload | student-management-system | Protected by Atomicorp rules | 351000 , 393655 |
| CVE-2026-13553 | itsourcecode Online Hotel Management System controller.php add unrestricted upload | Online Hotel Management System | Protected by Atomicorp rules | 351000 |
| CVE-2026-14736 | Ruijie RG-UAC user_auth_commit.php unrestricted upload | RG-UAC | Protected by Atomicorp rules | 351000 |
| CVE-2026-18788 | Trippo ResponsiveFilemanager dialog.php unrestricted upload | ResponsiveFilemanager | Protected by Atomicorp rules | 351000 |
| CVE-2026-5261 | Shandong Hoteam InforCenter PLM BaseHandler.ashx uploadFileToIIS unrestricted upload | InforCenter PLM | Protected by Atomicorp rules | 351000 |
| CVE-2026-5573 | Technostrobe HI-LED-WR120-G2 fs unrestricted upload | hi-led-wr120-g2 firmware | Protected by Atomicorp rules | 351000 |
| CVE-2026-6602 | rickxy Hospital Management System his_admin_account.php unrestricted upload | Hospital Management System | Protected by Atomicorp rules | 351000 |
| CVE-2026-78202 | itsourcecode Payroll System admin_class.php save_settings unrestricted upload | Payroll System | Protected by Atomicorp rules | 351000 |
| CVE-2026-78245 | itsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted upload | Online Pharmacy System | Protected by Atomicorp rules | 351000 |
| CVE-2026-85208 | itsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted upload | Online Medicine Delivery System | Protected by Atomicorp rules | 351000 |
| CVE-2026-86239 | liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload | FeehiCMS | Protected by Atomicorp rules | 351000 |
| CVE-2026-86305 | light0011 cms Upload.class.php upload unrestricted upload | cms | Protected by Atomicorp rules | 351000 |
| CVE-2026-86666 | aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload | iWebShop-5 | Protected by Atomicorp rules | 351000 |
| CVE-2026-8758 | Metasoft 美特软件 MetaCRM upload3.jsp unrestricted upload | MetaCRM | Protected by Atomicorp rules | 351000 |
| CVE-2014-8677 | SO Planning 1.32 - Multiple Vulnerabilities | soplanning | Protected by Atomicorp rules | 331028 , 340016 , 340017 , 340144 , 340155 , 340156 , 340157 , 340159 , 341155 , 341245 , 344363 , 344370 , 360147 , 360148 , 360153 , 390726 , 392647 |
| CVE-2019-1622 | Cisco Data Center Network Manager Unauthenticated Remote Code Execution | data center network manager | Protected by Atomicorp rules | 330791 , 334168 , 340128 , 340152 , 360152 , 380018 , 390801 |
| CVE-2025-15152 | h-moses moga-mall PmsProductController.java addProduct unrestricted upload | moga-mall | Protected by Atomicorp rules | 340007 , 344360 , 390709 |
| CVE-2025-31486 | Vite server.fs.deny Bypass - Local File Inclusion | vite | Protected by Atomicorp rules | 347009 , 390709 |
| CVE-2025-63739 | rockoa Improper Access Control Vulnerability | rockoa | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2016-9722 | IBM QRadar SIEM Unauthenticated Remote Code Execution | qradar security information and event manager | Protected by Atomicorp rules | 330791 , 340152 |
| CVE-2015-1376 | WordPress Pixabay Images PHP Code Upload | pixabay images | Protected by Atomicorp rules | 340007 , 344360 , 382238 , 390709 |
| CVE-2024-14046 | OpenBoxes Document Upload Controller DocumentController.groovy DocumentController unrestricted upload | OpenBoxes | Protected by Atomicorp rules | 351000 |
| CVE-2025-11078 | itsourcecode Open Source Job Portal controller.php unrestricted upload | open source job portal | Protected by Atomicorp rules | 351000 |
| CVE-2025-11320 | zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload | wisdom-education | Protected by Atomicorp rules | 351000 |
| CVE-2025-11351 | code-projects Online Hotel Reservation System editpicexec.php unrestricted upload | online hotel reservation system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11352 | code-projects Online Hotel Reservation System addexec.php unrestricted upload | online hotel reservation system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11353 | code-projects Online Hotel Reservation System addgalleryexec.php unrestricted upload | online hotel reservation system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11354 | code-projects Online Hotel Reservation System addslideexec.php unrestricted upload | online hotel reservation system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11398 | SourceCodester Hotel and Lodge Management System Profile profile.php unrestricted upload | hotel and lodge management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11417 | Campcodes Advanced Online Voting Management System voters_add.php unrestricted upload | advanced online voting system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11426 | projectworlds Advanced Library Management System edit_book.php unrestricted upload | advanced library management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-11908 | Shenzhen Ruiming Technology Streamax Crocus FileDir.do uploadFile unrestricted upload | streamax crocus | Protected by Atomicorp rules | 351000 |
| CVE-2025-12346 | MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload | maxsite cms | Protected by Atomicorp rules | 351000 |
| CVE-2025-12347 | MaxSite CMS save-file-ajax.php unrestricted upload | maxsite cms | Protected by Atomicorp rules | 351000 |
| CVE-2025-12862 | projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload | online notes sharing platform | Protected by Atomicorp rules | 351000 |
| CVE-2025-13061 | itsourcecode Online Voting System index.php unrestricted upload | online voting system | Protected by Atomicorp rules | 351000 |
| CVE-2025-13238 | Bdtask Flight Booking Software Edit Profile edit unrestricted upload | flight booking software | Protected by Atomicorp rules | 351000 |
| CVE-2025-13573 | projectworlds can pass malicious payloads add_book.php unrestricted upload | advanced library management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-13815 | moxi159753 Mogu Blog v2 pictures unrestricted upload | mogublog | Protected by Atomicorp rules | 351000 |
| CVE-2025-13949 | ProudMuBai GoFilm FileController.go SingleUpload unrestricted upload | GoFilm | Protected by Atomicorp rules | 351000 |
| CVE-2025-14195 | code-projects Employee Profile Management System add_file_query.php unrestricted upload | employee profile management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-14522 | baowzh hfly upload_json.php unrestricted upload | hfly | Protected by Atomicorp rules | 351000 |
| CVE-2025-15050 | code-projects Student File Management System save_file.php unrestricted upload | student file management system | Protected by Atomicorp rules | 351000 |
| CVE-2025-15423 | EmpireSoft EmpireCMS connect.php CheckSaveTranFiletype unrestricted upload | empirecms | Protected by Atomicorp rules | 351000 |
| CVE-2025-9800 | SimStudioAI sim HTML File route.ts import unrestricted upload | sim | Protected by Atomicorp rules | 351000 |
| CVE-2026-101071 | Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload | Unet Web Service | Protected by Atomicorp rules | 351000 |
| CVE-2026-10172 | Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload | Multi-Store Inventory Management System | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-103541 | formtools.org Form Tools Ajax actions.php uploadFile unrestricted upload | Form Tools | Protected by Atomicorp rules | 351000 |
| CVE-2026-105389 | feelec-yishu feelcrm-os UploadTicketFile Endpoint UploadController.class.php unrestricted upload | feelcrm-os | Protected by Atomicorp rules | 351000 |
| CVE-2026-10806 | mjperpinosa stumasy add_post.php unrestricted upload | stumasy | Protected by Atomicorp rules | 351000 |
| CVE-2026-10807 | mjperpinosa stumasy change_profile_image.php unrestricted upload | stumasy | Protected by Atomicorp rules | 351000 |
| CVE-2026-108811 | WMCMS index.php information disclosure | WMCMS | Protected by Atomicorp rules | 344360 , 347009 |
| CVE-2026-116057 | KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload | KodExplorer | Protected by Atomicorp rules | 351000 |
| CVE-2026-116113 | GouGuOA Api.php chunkUpload unrestricted upload | GouGuOA | Protected by Atomicorp rules | 351000 |
| CVE-2026-14698 | SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted upload | Syllabus-Aligned Learning Management and Examination System | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-14776 | SourceCodester Onlne Examination & Learning Management System Filename Extension upload_files.php pathinfo unrestricted | Onlne Examination & Learning Management System | Protected by Atomicorp rules | 351000 |
| CVE-2026-14777 | SourceCodester Onlne Examination & Learning Management System announcements.php unrestricted upload | Onlne Examination & Learning Management System | Protected by Atomicorp rules | 351000 |
| CVE-2026-16451 | zsadmin2025 ZS-Admin com.zs.file.controller.SysFileController upload unrestricted upload | ZS-Admin | Protected by Atomicorp rules | 351000 |
| CVE-2026-19210 | SourceCodester Photo Share Website ajax.php save_upload unrestricted upload | Photo Share Website | Protected by Atomicorp rules | 351000 |
| CVE-2026-5670 | Cyber-III Student-Management-System upload.php move_uploaded_file unrestricted upload | Student-Management-System | Protected by Atomicorp rules | 351000 |
| CVE-2026-6489 | QueryMine sms Background Management addteacher.php unrestricted upload | sms | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-7107 | code-projects Invoice System in Laravel company unrestricted upload | Invoice System in Laravel | Protected by Atomicorp rules | 351000 |
| CVE-2026-7732 | code-projects BloodBank Managing System request_blood.php unrestricted upload | BloodBank Managing System | Protected by Atomicorp rules | 351000 |
| CVE-2026-77681 | CodeAstro Online Job Portal update-profile.php unrestricted upload | Online Job Portal | Protected by Atomicorp rules | 351000 |
| CVE-2026-82679 | diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload | diem | Protected by Atomicorp rules | 351000 |
| CVE-2026-85186 | itsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted upload | Online Medicine Delivery System | Protected by Atomicorp rules | 351000 |
| CVE-2026-90500 | lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload | vhr | Protected by Atomicorp rules | 351000 |
| CVE-2026-90857 | SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload | College Notes Gallery Management System | Protected by Atomicorp rules | 351000 |
| CVE-2026-91005 | SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted u | Online Faculty Clearance System | Protected by Atomicorp rules | 351000 |
| CVE-2026-91849 | WuzhiCMS Avatar Upload index.php setAvatar unrestricted upload | WuzhiCMS | Protected by Atomicorp rules | 351000 |
| CVE-2025-11103 | Projectworlds Online Tours and Travels change-image.php unrestricted upload | online tours and travels | Protected by Atomicorp rules | 351000 |
| CVE-2025-11136 | YiFang CMS Backend File.php webUploader unrestricted upload | yifang | Protected by Atomicorp rules | 351000 |
| CVE-2025-11508 | code-projects Voting System voters_add.php unrestricted upload | voting system | Protected by Atomicorp rules | 351000 |
| CVE-2025-12593 | code-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload | simple online hotel reservation system | Protected by Atomicorp rules | 351000 |
| CVE-2025-13185 | Bdtask/CodeCanyon News365 profile unrestricted upload | news365 | Protected by Atomicorp rules | 351000 |
| CVE-2025-13198 | DouPHP file.class.php unrestricted upload | DouPHP | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2025-14219 | Campcodes Retro Basketball Shoes Online Store admin_running.php unrestricted upload | retro basketball shoes online store | Protected by Atomicorp rules | 351000 |
| CVE-2025-14530 | SourceCodester Real Estate Property Listing App property.php unrestricted upload | real estate property listing app | Protected by Atomicorp rules | 351000 |
| CVE-2025-14582 | campcodes Online Student Enrollment System index.php unrestricted upload | online student enrollment system | Protected by Atomicorp rules | 351000 |
| CVE-2025-15110 | jackq XCMS Backend ProductImageController.class.php upload unrestricted upload | xcms | Protected by Atomicorp rules | 351000 |
| CVE-2025-15197 | code-projects/anirbandutta9 Content Management System/News-Buzz editposts.php unrestricted upload | news-buzz | Protected by Atomicorp rules | 351000 |
| CVE-2026-116603 | SourceCodester Online Food Ordering System add_food.php unrestricted upload | Online Food Ordering System | Protected by Atomicorp rules | 351000 |
| CVE-2026-15518 | AREA 17 Twill CMS Media Library Insert FileLibraryController.php storeFile unrestricted upload | Twill CMS | Protected by Atomicorp rules | 351000 |
| CVE-2026-19383 | saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload | SaiAdmin | Protected by Atomicorp rules | 351000 |
| CVE-2026-19839 | SourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted upload | Simple Doctors Appointment System | Protected by Atomicorp rules | 351000 |
| CVE-2026-5576 | SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload | Record Management System | Protected by Atomicorp rules | 340156 , 341245 , 351000 , 390501 |
| CVE-2026-7238 | code-projects Online Music Site AdminUpdateAlbum.php unrestricted upload | Online Music Site | Protected by Atomicorp rules | 351000 |
| CVE-2026-76995 | SourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload | Simple Online Food Ordering System | Protected by Atomicorp rules | 351000 |
| CVE-2026-82629 | jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload | jeewx-boot | Protected by Atomicorp rules | 351000 |
Associated Atomicorp WAF Rules
| Rule | Status | Behavior |
|---|---|---|
| 330791 | Active | disruptive (deny) |
| 331028 | Active | disruptive (deny) |
| 333360 | Active | disruptive (deny) |
| 334168 | Active | disruptive (deny) |
| 337109 | Active | disruptive (deny) |
| 337110 | Active | disruptive (deny) |
| 337209 | Active | disruptive (deny) |
| 337211 | Active | disruptive (deny) |
| 337473 | Active | disruptive (deny) |
| 340006 | Active | disruptive (deny) |
| 340007 | Active | disruptive (deny) |
| 340014 | Active | disruptive (deny) |
| 340016 | Active | disruptive (deny) |
| 340017 | Active | disruptive (deny) |
| 340023 | Active | disruptive (deny) |
| 340029 | Active | disruptive (deny) |
| 340128 | Active | disruptive (deny) |
| 340133 | Active | disruptive (deny) |
| 340144 | Active | disruptive (deny) |
| 340152 | Active | disruptive (deny) |
| 340155 | Active | disruptive (deny) |
| 340156 | Active | disruptive (deny) |
| 340157 | Active | disruptive (deny) |
| 340159 | Active | disruptive (deny) |
| 340162 | Active | disruptive (deny) |
| 340163 | Active | disruptive (deny) |
| 340165 | Active | disruptive (deny) |
| 340193 | Active | disruptive (deny) |
| 340362 | Active | disruptive (deny) |
| 341145 | Active | disruptive (deny) |
| 341155 | Active | disruptive (deny) |
| 341245 | Active | disruptive (deny) |
| 344360 | Active | disruptive (deny) |
| 344361 | Active | disruptive (deny) |
| 344362 | Active | disruptive (deny) |
| 344363 | Active | disruptive (deny) |
| 344364 | Active | disruptive (deny) |
| 344366 | Active | disruptive (deny) |
| 344370 | Active | disruptive (deny) |
| 345493 | Active | non-disruptive (pass) |
| 347009 | Active | disruptive (deny) |
| 350147 | Active | disruptive (deny) |
| 351000 | Active | disruptive (deny) |
| 360147 | Active | disruptive (deny) |
| 360148 | Active | disruptive (deny) |
| 360152 | Active | disruptive (deny) |
| 360153 | Active | disruptive (deny) |
| 377360 | Active | non-disruptive (pass) |
| 380018 | Active | disruptive (deny) |
| 380026 | Active | disruptive (deny) |
| 380122 | Active | disruptive (deny) |
| 382238 | Active | disruptive (deny) |
| 383871 | Active | disruptive (deny) |
| 390109 | Active | disruptive (deny) |
| 390501 | Active | disruptive (deny) |
| 390709 | Active | disruptive (deny) |
| 390716 | Active | disruptive (deny) |
| 390719 | Active | disruptive (deny) |
| 390720 | Active | disruptive (deny) |
| 390722 | Active | disruptive (deny) |
| 390724 | Active | disruptive (deny) |
| 390726 | Active | disruptive (deny) |
| 390727 | Active | disruptive (deny) |
| 390801 | Active | disruptive (deny) |
| 390904 | Active | disruptive (deny) |
| 392301 | Active | disruptive (deny) |
| 392647 | Active | disruptive (deny) |
| 392648 | Active | disruptive (deny) |
| 393655 | Active | disruptive (deny) |
| 398001 | Active | non-disruptive (pass) |
| 398008 | Active | non-disruptive (pass) |
| 398021 | Active | disruptive (deny) |
| 398022 | Active | disruptive (deny) |
Related MITRE CAPEC Context
MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims:
CAPEC-19 (opens in a new tab) , CAPEC-441 (opens in a new tab) , CAPEC-478 (opens in a new tab) , CAPEC-479 (opens in a new tab) , CAPEC-502 (opens in a new tab) , CAPEC-503 (opens in a new tab) , CAPEC-536 (opens in a new tab) , CAPEC-546 (opens in a new tab) , CAPEC-550 (opens in a new tab) , CAPEC-551 (opens in a new tab) , CAPEC-552 (opens in a new tab) , CAPEC-556 (opens in a new tab) , CAPEC-558 (opens in a new tab) , CAPEC-562 (opens in a new tab) , CAPEC-563 (opens in a new tab) , CAPEC-564 (opens in a new tab) , CAPEC-578 (opens in a new tab)