CVE-2005-3288

Published Oct 23, 2005

Last updated 10 months ago

Overview

Description: Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-434

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:rockliffe:mailsite_express:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA5B94E1-7D30-4D85-9746-6F0E4165045D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References