CVE-2005-3288
Mailsite Express allows remote attackers to upload and execute files with executable extensions...
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.
Exploit likelihood
What each source reports
NVD Score used
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.
- Record
CVE-2005-3288- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-434
- Updated
- 2026-11-02
CVE List No score
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.
- Record
CVE-2005-3288- Updated
- 2026-11-02
EUVDEUVD-2005-3287 No score
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.
- Record
EUVD-2005-3287- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53xf-485h-f6qg No score
Mailsite Express allows remote attackers to upload and execute files with executable extensions...
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.
- Record
GHSA-53xf-485h-f6qg- Weakness
- CWE-434
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3288 is a medium vulnerability (CVSS 5.0) in Rockliffe Mailsite Express, published October 23, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.64%, the 76th percentile. No source names a fixed version.