Unrated severityNVD Advisory· Published Nov 22, 2005· Updated Jun 16, 2026
CVE-2005-3758
CVE-2005-3758
Description
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.
Affected products
3cpe:2.3:h:google:mini_search_appliance:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:google:mini_search_appliance:*:*:*:*:*:*:*:*
- (no CPE)
- cpe:2.3:h:google:search_appliance:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- metasploit.com/research/vulns/google_proxystylesheet/nvdVendor Advisory
- secunia.com/advisories/17644nvdVendor Advisory
- securitytracker.com/idnvdVendor Advisory
- www.osvdb.org/20980nvd
- www.securityfocus.com/archive/1/417310/30/0/threadednvd
- www.securityfocus.com/bid/15509nvd
- www.vupen.com/english/advisories/2005/2500nvd
News mentions
0No linked articles in our index yet.