Arbitrary file upload in Rockliffe Mailsite Express

CVE-2005-3288

Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.

Vulnerability class: Unrestricted File Upload

EPSS: 0.013 (67.7th percentile) — read the EPSS interpretation.