source: http://www.securityfocus.com/bid/25894/info Google Mini Search Appliance is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. This issue affects Google Mini Search Appliance 3.4.14; other versions may also be affected. http://www.example.com/search?ie=[ Evil Code ]&site=x&output=xml_no_dtd'&client=x&proxystylesheet=x'
Related ExploitsTrying to match CVEs (1): CVE-2007-5255
Trying to match OSVDBs (1): 37420
Other Possible E-DB Search Terms: Google Mini Search Appliance 3.4.14, Google Mini Search Appliance
|2006-09-22||Google Mini Search Appliance 4.4.102.M.36 - Information Disclosure||Patrick Webster|