VULNERABILITY INTELLIGENCE

CVE-2005-3288

CVSS score5 MEDIUM

EPSS probability1.64%

CISA KEVNot currently listed

Published2005-10-23

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.

Weakness classification

CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references

cve@mitre.org — Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory