CVE-2003-0053: Apple Darwin Streaming Server

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message.

Affected products

• Apple Darwin Streaming Server: version 4.1.2 only
• Apple Quicktime Streaming Server: version 4.1.1 only

Published 2003-03-07. Last modified 2026-06-16.