CVEvulnerability

CVE-2005-3288

5.0 MEDIUM Published 2005-10-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-10-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-434

Description

Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.

Affected configurations

• rockliffe mailsite express

Related

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

Referenced by CWE · observed example (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References