medium4.3Public exploit code
CVE-2005-2523
Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX 10.4 Weblog Server - Cross-Site Scripting2005-08-15 · remote · osx · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Weblog Server | All versions |
| Apple | Mac Os X | Versions 10.4, 10.4.1, 10.4.2 |
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html