Google Public Service Search Problem
A software developer has recently discovered a vulnerability in the Google Public Service Search domain that could enable scammers to host phishing sites on Google’s domain. Google Public Service Search is a free service that allows educational institutions and nonprofit organizations to offer Google’s site search for their domain only. Google allows the companies to customize the results page with logos, contact information and other formatting in the header and footer areas of Google’s search results page. The vulnerability exists in the way Google supports its customization. It allows the publice service search customers the ability to run any javascript they want allowing some people to make phony websites used for phishing. The dangerous part about this whole thing is that the website is hosted on a Google domain so most PC users will trust it. Google has taken down the Google Public Service Search login so a fix is probably in the works.
Related Posts