Is CVE-2005-3477 actively exploited?

No active exploitation of CVE-2005-3477 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2005-3477 be exploited remotely?

Yes. CVE-2005-3477 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2005-3477?

CVE-2005-3477 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2005-3477

MEDIUM

CVE-2005-3477

NVD-CWE-OtherPublished: November 3, 2005· Updated: Jun 16, 2026

4.3

CVSS v3.1

Official Description

Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script in an image whose type does not match its extension, which is rendered by Internet Explorer due to CVE-2005-3312. NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in Invision Gallery.

NVD Source

Technical Analysis

CVE-2005-3477 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.