Lucene search
MitreCVE-2005-3288HistoryOct 23, 2005 - 10:02 a.m.
CVE-2005-3288
2005-10-2310:02:00
CWE-434
mitre
web.nvd.nist.gov
27
mailsite express
remote attackers
file upload
executable files
asp
security vulnerability
cve-2005-3288
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
45.5%
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the “compose page” feature, then accessing the file from the cache directory before saving or sending the message.
Affected configurations
Node
rockliffemailsite_express
| Vendor | Product | Version | CPE |
|---|---|---|---|
| rockliffe | mailsite_express | * | cpe:2.3:a:rockliffe:mailsite_express:*:*:*:*:*:*:*:* |
References
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
45.5%
Related for CVE-2005-3288