CVE-2008-4696

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat).

Link	Resource
http://www.opera.com/docs/changelogs/solaris/961/
http://www.opera.com/docs/changelogs/windows/961/
http://www.securityfocus.com/bid/31869	Exploit Patch
http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf
http://www.opera.com/support/search/view/903/	Vendor Advisory
http://www.openwall.com/lists/oss-security/2008/10/21/6
http://www.opera.com/docs/changelogs/mac/961/	Patch
http://secunia.com/advisories/32299	Vendor Advisory
http://www.opera.com/docs/changelogs/linux/961/	Patch
http://www.opera.com/docs/changelogs/freebsd/961/	Patch
http://www.openwall.com/lists/oss-security/2008/10/22/5
http://security.gentoo.org/glsa/glsa-200811-01.xml
http://securityreason.com/securityalert/4504
http://secunia.com/advisories/32394
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html
http://secunia.com/advisories/32538
http://www.vupen.com/english/advisories/2008/2873
https://exchange.xforce.ibmcloud.com/vulnerabilities/46003
https://www.exploit-db.com/exploits/6801
http://www.securityfocus.com/archive/1/497646/100/0/threaded

Configuration 1

cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:* cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:* cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:* cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:* cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*

---

Published : 2008-10-23 10:00

Updated : 2018-10-11 08:52

---

NVD link : CVE-2008-4696

Mitre link : CVE-2008-4696

No products.

CWE-79