CVEvulnerability
CVE-2005-3754
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-11-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message.
Affected configurations
• google mini search appliance
• google search appliance
References
- http://metasploit.com/research/vulns/google_proxystylesheet/ Vendor Advisory
- http://secunia.com/advisories/17644 Vendor Advisory
- http://securitytracker.com/id?1015246 Exploit, Patch, Vendor Advisory
- http://www.osvdb.org/20978 Patch
- http://www.securityfocus.com/archive/1/417310/30/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15509 Patch
- http://www.vupen.com/english/advisories/2005/2500 www.vupen.com
- http://metasploit.com/research/vulns/google_proxystylesheet/ Vendor Advisory
- http://secunia.com/advisories/17644 Vendor Advisory
- http://securitytracker.com/id?1015246 Exploit, Patch, Vendor Advisory
- http://www.osvdb.org/20978 Patch
- http://www.securityfocus.com/archive/1/417310/30/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15509 Patch
- http://www.vupen.com/english/advisories/2005/2500 www.vupen.com