CVE-2005-2523 Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

MediumCVSS 4.3 EPSS 1.4% Public exploit

Published: 2005-08-19 07:00
Updated: 2026-06-17 01:15
Exploit status: Public exploit available

Description

Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected products

Product	Affected versions	Fixed in
apple weblog server	All versions	No fix listed
apple mac os x	= 10.4	No fix listed
apple mac os x	= 10.4.1	No fix listed
apple mac os x	= 10.4.2	No fix listed

References

APPLE-SA-2005-08-17 patch vendor-advisory
APPLE-SA-2005-08-15 patch vendor-advisory

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.39% (percentile 72.7)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Apple Mac OSX 10.4 Weblog Server - Cross-Site Scripting Exploit · Exploit Database (OffSec) · 2005-08-15