GCVE-110-CERTCC-2006-989144

Advisory Published

Vulnetix · Advisory published November 17, 2006

Google Mini and Google Search Appliance fail to properly handle UTF-7 encoded URIs. This vulnerability may allow a remote attacker to read or modify data in web pages.

Download JSON Open in Console

Risk Scores

certcc-cam

impact4population17exploitation12widely_known20score_current11.6025ease_of_exploitation13

certcc-vrda

d1_impact2d1_population3d1_direct_report1

Aliases

CVE-2006-6223

Transitive aliases

GHSA-pm73-cpw4-m5p4 GSD-2006-6223

References

Google Mini and Google Search Appliance vulnerable to cross-site scripting

advisory

Google Mini and Google Search Appliance vulnerable to cross-site scripting

url

Google Mini and Google Search Appliance vulnerable to cross-site scripting

url

Google Mini and Google Search Appliance vulnerable to cross-site scripting

url

Google Mini and Google Search Appliance vulnerable to cross-site scripting

url

Google Mini and Google Search Appliance vulnerable to cross-site scripting

url

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON