Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.
References
Link | Resource |
---|---|
http://securitytracker.com/id?1015063 | Patch Vendor Advisory |
Configurations
Information
Published : 2005-10-23 03:02
Updated : 2008-09-05 13:53
NVD link : CVE-2005-3288
Mitre link : CVE-2005-3288
JSON object : View
CWE
Products Affected
rockliffe
- mailsite_express