CVE-2006-6223

Cross-site scripting (XSS) vulnerability in Google Search Appliance and Google Mini allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded q parameter.

Date published : 2006-12-01

http://www.securityfocus.com/bid/21438

http://www.kb.cert.org/vuls/id/989144