CVE-2005-3287

Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions…

published October 23, 2005

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01404 · 72.2th percentile
Published
2005-10-23T04:00Z
EPSS history
Timeline
  • 23 OCT 04:00Z
    Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions…
    cvelistv5