search engine vulnerability