CVE-2005-2523: XSS

Published Aug 19, 2005
·
Updated

Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected Software

4 affected components
Apple Weblog Server
Apple iOS and macOS=10.4.1
Apple iOS and macOS=10.4
Apple iOS and macOS=10.4.2

Event History

Aug 19, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2005-2523?

CVE-2005-2523 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.

2

How do I fix CVE-2005-2523?

To mitigate CVE-2005-2523, it is recommended to upgrade to a patched version of Apple Weblog Server or the latest version of Mac OS X.

3

What types of attacks are possible with CVE-2005-2523?

CVE-2005-2523 allows remote attackers to execute arbitrary web scripts or HTML, leading to cross-site scripting attacks.

4

Which versions of Mac OS X are affected by CVE-2005-2523?

CVE-2005-2523 affects Mac OS X versions 10.4, 10.4.1, and 10.4.2.

5

What is the impact of exploiting CVE-2005-2523?

Exploiting CVE-2005-2523 can compromise the confidentiality and integrity of user data by executing malicious scripts in the context of the user's browser.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203