CVEvulnerability

CVE-2003-0053

4.3 MEDIUM Published 2003-03-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-03-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message.

Affected configurations

• apple darwin streaming server 4.1.2 • apple quicktime streaming server 4.1.1

References