3 matches found
CVE-2005-3579
ts.exe aka ts.cgi in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the querystring...
CVE-2005-3578
CVE-2005-3578 affects Walla TeleSite 3.0 and earlier due to an SQL injection in ts.exe (ts.cgi) that allows remote attackers to inject arbitrary SQL via the sug parameter. The NVD entry lists a network attack vector with low complexity and no authentication, yielding partial confidentiality, inte...
CVE-2005-3577
This CVE-2005-3577 describes a Cross-site Scripting (XSS) vulnerability in Walla TeleSite 3.0 and earlier, exploitable via the sug parameter in ts.exe (ts.cgi). The underlying issue is improper handling of user input in the CGI component, leading to injection of arbitrary web script/HTML when an ...