CVE-2005-3754

no score yetEPSS 2.3%

google: no CVSS score yet. EPSS 2.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2005-11-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

google:mini_search_appliance
google:search_appliance

References

http://metasploit.com/research/vulns/google_proxystylesheet/
http://secunia.com/advisories/17644
http://securitytracker.com/id?1015246
http://www.osvdb.org/20978
http://www.securityfocus.com/archive/1/417310/30/0/threaded

Check your stack JSON