CVE-2005-3757

This Metasploit module exploits a vulnerability in the Saxon XSLT parser used by the Google Search Appliance, allowing arbitrary Java method calls via a crafted XSLT stylesheet. The exploit sets up an HTTP server to serve malicious XML data, triggering command execution on the target.

This exploit targets a vulnerability in the Google Search Appliance's Saxon XSLT parser, allowing arbitrary Java method execution via the ProxyStyleSheet feature. It sets up a local HTTP server to serve a malicious XSLT payload, which triggers command execution on the target appliance.

This Metasploit module exploits a feature in the Saxon XSLT parser used by the Google Search Appliance, allowing arbitrary Java method calls. It leverages the 'proxystylesheet' parameter to execute commands via a malicious XSLT file hosted by the attacker.