← Database

CVE-2005-3758

MEDIUM CVSS: 4.3 Published: 2005-11-22 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.

Affected Platforms

Google Search ApplianceGoogle Mini Search Appliance

Weakness Type

NVD-CWE-Other

References