NVD

Id
69091  
Name
CVE-2005-3430  
Description
Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions, such as (1) .unk, (2) .asa, and possibly (3) .htr and (4) .aspx, which are not filtered like the .asp extension.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-11-02  
Modified Date
2017-07-10  
Seq
2005-3430  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
357233 69091 CVE-2005-3430 20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail  View
357234 69091 CVE-2005-3430 20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail  View
357235 69091 CVE-2005-3430 1015117  View
357236 69091 CVE-2005-3430 http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf  View
357237 69091 CVE-2005-3430 15230  View
357238 69091 CVE-2005-3430 mailsiteexpress-attachment-script-execution(22907)  View

Related JVN