FreeBSD : opera -- multiple vulnerabilities (f5c4d7f7-9f4b-11dd-bab1-001999392805)

Opera reports : Certain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to look through the user's browsing history, including the contents of the pages they have visited. These may contain sensitive...

CVE-2008-4697

The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote attackers to conduct cross-site scripting XSS attacks...

Cross site scripting

The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote attackers to conduct cross-site scripting XSS attacks...

CVE-2008-4697

The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote attackers to conduct cross-site scripting XSS attacks...

CVE-2008-4697

The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote attackers to conduct cross-site scripting XSS attacks...

CVE-2008-4697

CVE-2008-4697 affects Opera before 9.61 where the Fast Forward feature executes a javascript: URL in the context of the outermost frame, enabling remote XSS. Affected product: Opera browser; vulnerable component/behavior: framed page handling in Fast Forward. Impact per sources includes cross-sit...

Opera Web浏览器HTML注入及跨站脚本漏洞

BUGTRAQ ID: 31842 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.61之前版本中的多个安全漏洞可能允许恶意用户执行脚本注入攻击、绕过某些安全限制或泄露敏感信息。 1 History Search功能没有正确地过滤某些输入，用户在查看恶意数据时可能在用户的浏览器会话中注入任意HTML和脚本代码，导致泄露之前所访问的页面。 2 实现Fast Forward功能中的错误可能允许通过特制的JavaScript URL在受限制的帧中执行任意脚本代码。 3 在预览新闻源期间时阻断脚本存在错误，可能导致泄露所订阅新闻源的内容，或将用户订阅到任意的新闻源。 Oper...

CVE-2008-4624

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFGCDIR parameter...

CVE-2008-4624

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFGCDIR parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFGCDIR parameter...

CVE-2008-4622

The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1...

CVE-2008-4624

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFGCDIR parameter...

Opera < 9.61 Multiple Vulnerabilities

Binary data 4715.prm...

CVE-2008-4624

CVE-2008-4624 affects Fast Click SQL Lite 1.1.7. It is a PHP remote file inclusion vulnerability in init.php exploited when register_globals is enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the CFG[CDIR] parameter. The vulnerability details are documented acros...

Opera < 9.61 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 9.61 and thus reportedly affected by several issues : - It may be possible to reveal a user's browsing history by exploiting certain constructs in Opera's History Search results 903. - Opera's Fast Forward feature is affected by a...

fastclick-rfi.txt

=========================================================================================== o Fast CLick SQL Lite 1.1.7 Remote File Inclusion Vulnerability Software : Fast CLick SQL Lite version 1.1.7 Vendor : http://www.ftrsoft.com/ Download : http://www.ftrsoft.com/downloads.html Author : NoGe...

Fast Click SQL 1.1.7 Lite (init.php) Remote File Inclusion Vulnerability

No description provided by source. =========================================================================================== o Fast CLick SQL Lite 1.1.7 Remote File Inclusion Vulnerability Software : Fast CLick SQL Lite version 1.1.7 Vendor : http://www.ftrsoft.com/ Download :...

Fast Click SQL 1.1.7 Lite - 'init.php' Remote File Inclusion

=========================================================================================== o Fast CLick SQL Lite 1.1.7 Remote File Inclusion Vulnerability Software : Fast CLick SQL Lite version 1.1.7 Vendor : http://www.ftrsoft.com/ Download : http://www.ftrsoft.com/downloads.html Author : NoGe...

Fast Click SQL 1.1.7 Lite - init.php Remote File Inclusion

Fast Click SQL 1.1.7 Lite - init.php Remote File Inclusion =========================================================================================== o Fast CLick SQL Lite 1.1.7 Remote File Inclusion Vulnerability Software : Fast CLick SQL Lite version 1.1.7 Vendor : http://www.ftrsoft.com/...

Fast Click SQL 1.1.7 Lite (init.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Fast Click SQL 1.1.7 Lite init.php Remote File Inclusion Vulnerability ========================================================================...