CVE-2005-3756

Nessus plugin data in the connected document associates CVE-2005-3756 with Google Search Appliance proxystylesheet vulnerabilities that include remote access flaws enabling port scanning and potential code execution (via unsanitized proxystylesheet input). The CVE description in the initial docum...

CVE-2005-3758

CVE-2005-3758 is an XSS in Google Mini Search Appliance (and possibly Google Search Appliance) triggered by a malicious proxystylesheet in the proxystylesheet variable, allowing remote injection of Javascript/HTML. Affected: proxystylesheet handling; vulnerability type: XSS. Impact (per provided ...

CVE-2005-3754

CVE-2005-3754 describes a cross-site scripting (XSS) vulnerability in the Google Mini Search Appliance, and possibly Google Search Appliance, caused by insufficient sanitization of the proxystylesheet parameter. The flaw allows remote attackers to inject arbitrary Javascript (and potentially othe...

CVE-2005-3755

CVE-2005-3755 describes a directory traversal vulnerability in Google Mini Search Appliance (and possibly Google Search Appliance). The issue allows remote attackers to determine existence of arbitrary files by supplying a relative path from a style sheet directory and inspecting error messages. ...

CVE-2005-3757

The CVE-2005-3757 issue affects the Saxon XSLT parser used by Google Mini Search Appliance (and possibly Google Search Appliance). The vulnerability arises from dangerous Java methods (system-property, sys:getProperty, run:exec) in the select attribute of xsl:value-of in XSLT style sheets, enabli...

CVE-2006-6223

The vulnerability CVE-2006-6223 affects Google Mini and Google Search Appliance. Both products fail to handle UTF-7 encoded URIs, which may allow a remote, unauthenticated attacker to inject arbitrary content (including script) into web pages, potentially reading or modifying page data and relate...

CVE-2011-1339

CVE-2011-1339 affects Google Search Appliance (GSA) before version 5.0. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary JavaScript/HTML via unspecified vectors in the web interface. Impact described as arbitrary script execution in a user’s ...