Intrusion PreventionGoogle.Appliance.ProxyStyleSheet.Command.Execution
Description
This indicates a possible Cross-site scripting exploit targetting the Google Mini Search applicance.
The Google Mini Search Appliance, and possibly Google Search Appliance may allow remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.
Affected Products
Google Search Appliance and Google Mini Search Appliance.
Impact
Compromise of the system.
Recommended Actions
The vendor has released advisory GA-2005-08-m to address this issue, apply appropriate patch from the vendor.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 11592 |
| Created | Jan 10, 2006 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2005-3758 |
| Exploit Prediction Score | 43.58% |
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | Other |