CVE

Id
34317  
CVE No.
CVE-2008-4200  
Status
Candidate  
Description
Opera before 9.52 does not ensure that the address field of a news feed represents the feed"s actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker.  
Phase
Assigned (20080923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
375821 34317 CVE-2008-4200 MLIST:[oss-security] 20080919 CVE request: Opera < 9.52 multiple vulnerabilities  View
375822 34317 CVE-2008-4200 URL:http://www.openwall.com/lists/oss-security/2008/09/19/2  View
375823 34317 CVE-2008-4200 MLIST:[oss-security] 20080923 Re: CVE request: Opera < 9.52 multiple vulnerabilities  View
375824 34317 CVE-2008-4200 URL:http://www.openwall.com/lists/oss-security/2008/09/24/4  View
375825 34317 CVE-2008-4200 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=235298  View
375826 34317 CVE-2008-4200 CONFIRM:http://www.opera.com/docs/changelogs/freebsd/952/  View
375827 34317 CVE-2008-4200 CONFIRM:http://www.opera.com/docs/changelogs/linux/952/  View
375828 34317 CVE-2008-4200 CONFIRM:http://www.opera.com/docs/changelogs/mac/952/  View
375829 34317 CVE-2008-4200 CONFIRM:http://www.opera.com/docs/changelogs/solaris/952/  View
375830 34317 CVE-2008-4200 CONFIRM:http://www.opera.com/docs/changelogs/windows/952/  View
375831 34317 CVE-2008-4200 CONFIRM:http://www.opera.com/support/search/view/897/  View
375832 34317 CVE-2008-4200 GENTOO:GLSA-200811-01  View
375833 34317 CVE-2008-4200 URL:http://security.gentoo.org/glsa/glsa-200811-01.xml  View
375834 34317 CVE-2008-4200 BID:30768  View
375835 34317 CVE-2008-4200 URL:http://www.securityfocus.com/bid/30768  View
375836 34317 CVE-2008-4200 SECTRACK:1020723  View
375837 34317 CVE-2008-4200 URL:http://www.securitytracker.com/id?1020723  View
375838 34317 CVE-2008-4200 SECUNIA:32538  View
375839 34317 CVE-2008-4200 URL:http://secunia.com/advisories/32538  View
375840 34317 CVE-2008-4200 SECUNIA:31549  View
375841 34317 CVE-2008-4200 URL:http://secunia.com/advisories/31549  View
375842 34317 CVE-2008-4200 VUPEN:ADV-2008-2416  View
375843 34317 CVE-2008-4200 URL:http://www.vupen.com/english/advisories/2008/2416  View
375844 34317 CVE-2008-4200 XF:opera-newsfeed-weak-security(44559)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50934 JVNDB-2008-006244 SoftAcid HRS の city.asp における SQL インジェクションの脆弱性 SoftAcid Hotel Reservation System (HRS) の city.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2008-4204 34317 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006244.html  View