CVE-2003-0053 in Quicktime Streaming Server

Summary

Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 03/07/2003
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-80 (Confirmed)
• CVSS: 4.3
• EPSS: 0.00477
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0053
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0053
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0053/