Rockliffe · Rockliffe Mailsite Express · CVE-2005-3430
**Name of the Vulnerable Software and Affected Versions**
Rockliffe MailSite Express versions prior to 6.1.22
**Description**
The issue allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions, such as `.unk`, `.asa`, and possibly `.htr` and `.aspx`, which are not filtered like the `.asp` extension.
**Recommendations**
For versions prior to 6.1.22, update to version 6.1.22 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to only necessary extensions to minimize the risk of exploitation.