QwikSec

Security Database

CVE

CWE

Training

CVE-2005-3430

Published: Nov 2, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions, such as (1) .unk, (2) .asa, and possibly (3) .htr and (4) .aspx, which are not filtered like the .asp extension.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail

mailing-list

x_refsource_FULLDISC

mailsiteexpress-attachment-script-execution(22907)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_SECTRACK

http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.