CVE-2005-3287

N/A

Description

Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory.

CVE Details

CVSS v3.1 ScoreN/A

Published10/23/2005

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

rockliffe:mailsite_express

References

http://securitytracker.com/id?1015063(cve@mitre.org)

http://securitytracker.com/id?1015063(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.