CVE-2008-4696

🗓️ 23 Oct 2008 21:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 48 Views🌐 WEB

CVE-2008-4696: Cross-site scripting (XSS) vulnerability in Opera.dl

Reporter	Title	Published	Views	Family All 20
Tenable Nessus	Opera < 9.61 Multiple Vulnerabilities	21 Oct 200800:00	–	nessus
Tenable Nessus	GLSA-200811-01 : Opera: Multiple vulnerabilities	4 Nov 200800:00	–	nessus
Tenable Nessus	Opera < 9.61 Multiple Vulnerabilities	21 Oct 200800:00	–	nessus
Circl	CVE-2008-4696	22 Oct 200800:00	–	circl
Cvelist	CVE-2008-4696	23 Oct 200821:00	–	cvelist
d2	DSquare Exploit Pack: D2SEC_OPERAXSS	23 Oct 200822:00	–	d2
Gentoo Linux	Opera: Multiple vulnerabilities	3 Nov 200800:00	–	gentoo
NVD	CVE-2008-4696	23 Oct 200822:00	–	nvd
OpenVAS	Gentoo Security Advisory GLSA 200811-01 (opera)	19 Nov 200800:00	–	openvas
OpenVAS	Opera Web Browser Multiple XSS Vulnerabilities - Windows	30 Oct 200800:00	–	openvas

NVD

Node

OR

opera operaRange≤9.6

OR

opera operaMatch5..10

OR

opera operaMatch5.0

OR

opera operaMatch5.1

OR

opera operaMatch5.2

OR

opera operaMatch5.3

OR

opera operaMatch5.4

OR

opera operaMatch5.5

OR

opera operaMatch5.6

OR

opera operaMatch5.7

OR

opera operaMatch5.8

OR

opera operaMatch5.9

OR

opera operaMatch5.11

OR

opera operaMatch5.12

OR

opera operaMatch6beta_1

OR

opera operaMatch6.0

OR

opera operaMatch6.01

OR

opera operaMatch6.02

OR

opera operaMatch6.03

OR

opera operaMatch6.04

OR

opera operaMatch6.05

OR

opera operaMatch6.06

OR

opera operaMatch7beta_1

OR

opera operaMatch7beta_1.2

OR

opera operaMatch7.0

OR

opera operaMatch7.0beta_2

OR

opera operaMatch7.01

OR

opera operaMatch7.02

OR

opera operaMatch7.03

OR

opera operaMatch7.10

OR

opera operaMatch7.11

OR

opera operaMatch7.20

OR

opera operaMatch7.20beta7

OR

opera operaMatch7.21

OR

opera operaMatch7.22

OR

opera operaMatch7.23

OR

opera operaMatch7.50

OR

opera operaMatch7.50beta_1

OR

opera operaMatch7.51

OR

opera operaMatch7.52

OR

opera operaMatch7.53

OR

opera operaMatch7.54

OR

opera operaMatch7.54update_1

OR

opera operaMatch7.54update_2

OR

opera operaMatch8.0

OR

opera operaMatch8.0beta_1

OR

opera operaMatch8.0beta_2

OR

opera operaMatch8.0beta_3

OR

opera operaMatch8.01

OR

opera operaMatch8.02

OR

opera operaMatch8.50

OR

opera operaMatch8.51

OR

opera operaMatch8.52

OR

opera operaMatch8.53

OR

opera operaMatch8.54

OR

opera operaMatch9.0

OR

opera operaMatch9.0beta_1

OR

opera operaMatch9.0beta_2

OR

opera operaMatch9.01

OR

opera operaMatch9.02

OR

opera operaMatch9.10

OR

opera operaMatch9.20

OR

opera operaMatch9.20beta_1

OR

opera operaMatch9.21

OR

opera operaMatch9.22

OR

opera operaMatch9.23

OR

opera operaMatch9.24

OR

opera operaMatch9.25

OR

opera operaMatch9.26

OR

opera operaMatch9.27

OR

opera operaMatch9.50

OR

opera operaMatch9.50beta_2

OR

opera operaMatch9.51

Source	Link
securityreason	www.securityreason.com/securityalert/4504
secunia	www.secunia.com/advisories/32538
securityfocus	www.securityfocus.com/archive/1/497646/100/0/threaded
securityfocus	www.securityfocus.com/bid/31869
exploit-db	www.exploit-db.com/exploits/6801
security-assessment	www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf
security	www.security.gentoo.org/glsa/glsa-200811-01.xml
openwall	www.openwall.com/lists/oss-security/2008/10/21/6
opera	www.opera.com/docs/changelogs/freebsd/961/
opera	www.opera.com/docs/changelogs/mac/961/

Parameter	Position	Path	Description	CWE
q	path	opera:historysearch	XSS via Opera history search results not escaped before storage, exploitable through the anchor/fragment mechanism in Opera (CVE-2008-4696).	CWE-79

23 Apr 2026 00:35Current

7.4High risk

Vulners AI Score7.4

CVSS 24.3

EPSS0.62121

cve-2008-4696 cross-site scripting xss opera vulnerability web script html md.dat