CVE-2003-0526

CVE-2003-0526 describes a Cross-site Scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000. This flaw allows remote attackers to inject arbitrary web script into default error pages (500.htm or 404.htm) by crafting a malicious URL with script embedded in the domain name. The vulnerability has a CVSS score of 6.8, indicating medium severity. It can be exploited remotely with medium attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit code is publicly available via ExploitDB (EDB-22919). The CVE has garnered significant community discussion with 10 mentions, suggesting awareness and potential interest in its exploitation.