Description
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.
References
- 20980 vdb-entry
- 17644 third-party-advisory
- http://metasploit.com/research/vulns/google_proxystylesheet/
- 20051121 Google Search Appliance proxystylesheet Flaws mailing-list
- ADV-2005-2500 vdb-entry
- 15509 vdb-entry
- 1015246 vdb-entry