CVE-2003-0053

3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.5%
top 35.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Darwin Streaming ServerApple Quicktime Streaming Server
Timeline
PublishedMar 7
Latest updateApr 29

Description

Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-93p7-mwq5-3h6c: Cross-site scripting (XSS) vulnerability in parse_xml↗2022-04-29
▶
CVEList
CVE-2003-0053: Cross-site scripting (XSS) vulnerability in parse_xml↗2004-09-01
▶