CVE-2005-3577

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting vulnerability (XSS) in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the sug parameter.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17547Vendor Advisory
http://securitytracker.com/id?1015204Exploit
http://www.securityfocus.com/archive/1/416581/30/0/threaded
http://www.securityfocus.com/bid/15419Exploit
http://secunia.com/advisories/17547Vendor Advisory
http://securitytracker.com/id?1015204Exploit
http://www.securityfocus.com/archive/1/416581/30/0/threaded
http://www.securityfocus.com/bid/15419Exploit

Timeline

Published: Nov 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-35787.5SQL injection vulnerability in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary SQL command CVE-2005-35795.0ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the querystring.CVE-2005-35807.2QDBM before 1.8.33-r2 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build dire CVE-2005-35817.2GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build direc CVE-2005-35827.2ImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary bu CVE-2005-35837.8(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow CVE-2005-35844.3Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML v CVE-2005-35857.5SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum param CVE-2005-35865.0content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes CVE-2005-358710.0Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vector CVE-2005-35887.5SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privil CVE-2005-35897.8Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER