CVE-2005-3287

Published: Oct 23, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory.

Affected (1)

Products: Rockliffe: Mailsite Express

Rockliffe

1 product

Mailsite Express

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Rockliffe Mailsite Express	All versions

References (2)

http://securitytracker.com/id?1015063

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015063

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.