Description
Cross-site scripting (XSS) vulnerability in Google Search Appliance and Google Mini allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded q parameter.
References
- 1017317 vdb-entry
- googlesearch-utf7-xss(30647) vdb-entry
- http://sla.ckers.org/forum/read.php?3%2C3109
- 23239 third-party-advisory
- VU#989144 third-party-advisory
- ADV-2006-4789 vdb-entry
- 21438 vdb-entry