CVE-2005-3287

CVE-2005-3287 concerns an incomplete blacklist vulnerability in Mailsite Express that allows remote upload of files via attachments with executable extensions (e.g., ASPX) which are not converted to .TXT and can be directly requested from the cache directory. The sources indicate the issue but do...

CVE-2005-3288

Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message...

CVE-2005-3288

Mailsite Express is affected by CVE-2005-3288. Remote attackers can upload and execute files with executable extensions (e.g., ASP) by attaching the file via the compose page and then accessing it from the cache directory before saving or sending the message. The vulnerability is documented acros...