Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f63g-rv4q-jww3

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory.

Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory.

EPSS

Процентиль: 68%
0.00556
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory.

EPSS

Процентиль: 68%
0.00556
Низкий