PT-2005-4099 · Ftgate · Mailsite Express
CVE-2005-3288
·
Publicado
2005-10-23
·
Atualizado
2024-01-26
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mailsite Express (affected versions not specified)
Description
The issue allows remote attackers to upload and execute files with executable extensions, such as ASP, by utilizing the
compose page feature. Attackers can attach the file and then access it from the cache directory before saving or sending the message.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Mailsite Express