This script is Copyright (C) 2007-2013 Tenable Network Security, Inc.
The remote web server is affected by a cross-site scripting
The remote Google Search Appliance / Mini Search Appliance fails to
sanitize user-supplied input to the 'ie' parameter used in the search
interface. An unauthenticated, remote attacker may be able to leverage
this issue to inject arbitrary HTML or script code into a user's browser
to be executed within the security context of the affected site.
See also :
Apply the fix as discussed in the vendor advisory referenced above.
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.9
Public Exploit Available : true