AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2007-3484

MEDIUM · CVSS 6.1 EPSS 0.44%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-06-28 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java. It may be remotely exploitable.

CVE
CVE-2007-3484
Severity
MEDIUM
CVSS
6.1
EPSS
0.44%
Java

Original NVD Description

Cross-site scripting (XSS) vulnerability in search.php in Google Custom Search Engine allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this issue is disputed by the Google Security Team, who states that "Google does not provide the 'search.php' script referenced. When a user creates a custom search engine, we provide them with a block of javascript to include on their site. Some users write additional code around this block of javascript to further customize their website.