CVE-2005-3754: XSS
First published: Tue Nov 22 2005(Updated: )
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Search Appliance | ||
| Google Search Appliance Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://metasploit.com/research/vulns/google_proxystylesheet/
- http://www.securityfocus.com/bid/15509
- http://www.osvdb.org/20978
- http://securitytracker.com/id?1015246
- http://secunia.com/advisories/17644
- http://www.vupen.com/english/advisories/2005/2500
- http://www.securityfocus.com/archive/1/417310/30/0/threaded
Frequently Asked Questions
What is the severity of CVE-2005-3754?
CVE-2005-3754 is classified as a medium severity cross-site scripting vulnerability.
How do I fix CVE-2005-3754?
To fix CVE-2005-3754, ensure that you validate and sanitize the input for the proxystylesheet variable to prevent script injection.
Which products are affected by CVE-2005-3754?
CVE-2005-3754 affects the Google Mini Search Appliance and potentially the Google Search Appliance.
What type of attack can be executed through CVE-2005-3754?
CVE-2005-3754 allows remote attackers to execute arbitrary JavaScript through cross-site scripting.
Can CVE-2005-3754 affect user data?
Yes, CVE-2005-3754 can potentially expose user data to attackers through malicious script execution.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- vendor/google
- product/mini search appliance
- canonical/google mini search appliance
- product/search appliance
- canonical/google search appliance
- agent/software-canonical-lookup-request
- collector/nvd-index
- canonical/google search appliance software