CVE-2005-3754

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message.

• http://metasploit.com/research/vulns/google_proxystylesheet/Vendor Advisory
• http://secunia.com/advisories/17644Vendor Advisory
• http://securitytracker.com/id?1015246Exploit, Patch, Vendor Advisory
• http://www.osvdb.org/20978Patch
• http://www.securityfocus.com/archive/1/417310/30/0/threaded
• http://www.securityfocus.com/bid/15509Patch
• http://www.vupen.com/english/advisories/2005/2500
• http://metasploit.com/research/vulns/google_proxystylesheet/Vendor Advisory
• http://secunia.com/advisories/17644Vendor Advisory
• http://securitytracker.com/id?1015246Exploit, Patch, Vendor Advisory
• http://www.osvdb.org/20978Patch
• http://www.securityfocus.com/archive/1/417310/30/0/threaded
• http://www.securityfocus.com/bid/15509Patch
• http://www.vupen.com/english/advisories/2005/2500

Published

Nov 22, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3748SQL injection vulnerability in the Search module in Tru-Zone…
• CVE-2005-3749Unspecified "absolute path vulnerabilities" in the diagela c…
• CVE-2005-3750Opera before 8.51 on Linux and Unix systems allows remote at…
• CVE-2005-3751HTTP request smuggling vulnerability in Pound before 1.9.4 a…
• CVE-2005-3752Unspecified vulnerability in ldapdiff before 1.1.1 has unkno…
• CVE-2005-3753Linux kernel before after 2.6.12 and before 2.6.13.1 might a…
• CVE-2005-3755Directory traversal vulnerability in Google Mini Search Appl…
• CVE-2005-3756Google Mini Search Appliance, and possibly Google Search App…
• CVE-2005-3757The Saxon XSLT parser in Google Mini Search Appliance, and p…
• CVE-2005-3758Cross-site scripting (XSS) vulnerability in Google Mini Sear…
• CVE-2005-3759Multiple cross-site scripting (XSS) vulnerabilities in Horde…
• CVE-2005-3760Double free vulnerability in the BBOORB module in IBM WebSph…