Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI.
References
Link | Resource |
---|---|
http://www.opera.com/linux/changelogs/802/ | Broken Link Patch |
http://secunia.com/advisories/15756 | Broken Link Patch |
http://www.securityfocus.com/bid/14410 | Broken Link Third Party Advisory VDB Entry |
http://securitytracker.com/id?1014593 | Broken Link Third Party Advisory VDB Entry |
http://www.vupen.com/english/advisories/2005/1251 | Broken Link |
Configurations
Information
Published : 2005-07-31 21:00
Updated : 2022-02-28 08:30
NVD link : CVE-2005-2406
Mitre link : CVE-2005-2406
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
opera
- opera_browser