Exploit Google Mini Search Appliance 3.4.14 - 'IE' Cross-Site Scripting

[Exploiter]

EDB-ID

30631

Проверка EDB

1. Пройдено

Автор

WEBSECURITY

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

cve-2007-5255

Дата публикации

2007-09-20

source: https://www.securityfocus.com/bid/25894/info

Google Mini Search Appliance is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects Google Mini Search Appliance 3.4.14; other versions may also be affected.

http://www.example.com/search?ie=[ Evil Code ]&site=x&output=xml_no_dtd'&client=x&proxystylesheet=x'