Common Weakness Enumeration

    CWE Definition / CWE-616

    CWE-616: Incomplete Identification of Uploaded File Variables (PHP)

    The PHP application uses an old method for processing uploaded files by referencing the four global variables that are set for each file (e.g. $varname, $varname_size, $varname_name, $varname_type).

    Published:7 May 2007
    Organization:MITRE
    Modified:28 Oct 2026

    Related Weakness

    CWE-345: Insufficient Verification of Data Authenticity

    CWE-473: PHP External Variable Modification