CVE

Id
34813  
CVE No.
CVE-2008-4696  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat).  
Phase
Assigned (20081022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381253 34813 CVE-2008-4696 BUGTRAQ:20081022 Opera Stored Cross Site Scripting Vulnerability  View
381254 34813 CVE-2008-4696 URL:http://www.securityfocus.com/archive/1/archive/1/497646/100/0/threaded  View
381255 34813 CVE-2008-4696 MILW0RM:6801  View
381256 34813 CVE-2008-4696 URL:http://www.milw0rm.com/exploits/6801  View
381257 34813 CVE-2008-4696 MLIST:[oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixes  View
381258 34813 CVE-2008-4696 URL:http://www.openwall.com/lists/oss-security/2008/10/21/6  View
381259 34813 CVE-2008-4696 MLIST:[oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes  View
381260 34813 CVE-2008-4696 URL:http://www.openwall.com/lists/oss-security/2008/10/22/5  View
381261 34813 CVE-2008-4696 MISC:http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf  View
381262 34813 CVE-2008-4696 CONFIRM:http://www.opera.com/docs/changelogs/freebsd/961/  View
381263 34813 CVE-2008-4696 CONFIRM:http://www.opera.com/docs/changelogs/linux/961/  View
381264 34813 CVE-2008-4696 CONFIRM:http://www.opera.com/docs/changelogs/mac/961/  View
381265 34813 CVE-2008-4696 CONFIRM:http://www.opera.com/docs/changelogs/solaris/961/  View
381266 34813 CVE-2008-4696 CONFIRM:http://www.opera.com/docs/changelogs/windows/961/  View
381267 34813 CVE-2008-4696 CONFIRM:http://www.opera.com/support/search/view/903/  View
381268 34813 CVE-2008-4696 GENTOO:GLSA-200811-01  View
381269 34813 CVE-2008-4696 URL:http://security.gentoo.org/glsa/glsa-200811-01.xml  View
381270 34813 CVE-2008-4696 SUSE:SUSE-SR:2008:022  View
381271 34813 CVE-2008-4696 URL:http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html  View
381272 34813 CVE-2008-4696 BID:31869  View
381273 34813 CVE-2008-4696 URL:http://www.securityfocus.com/bid/31869  View
381274 34813 CVE-2008-4696 SECUNIA:32538  View
381275 34813 CVE-2008-4696 URL:http://secunia.com/advisories/32538  View
381276 34813 CVE-2008-4696 VUPEN:ADV-2008-2873  View
381277 34813 CVE-2008-4696 URL:http://www.vupen.com/english/advisories/2008/2873  View
381278 34813 CVE-2008-4696 SECUNIA:32299  View
381279 34813 CVE-2008-4696 URL:http://secunia.com/advisories/32299  View
381280 34813 CVE-2008-4696 SECUNIA:32394  View
381281 34813 CVE-2008-4696 URL:http://secunia.com/advisories/32394  View
381282 34813 CVE-2008-4696 SREASON:4504  View
381283 34813 CVE-2008-4696 URL:http://securityreason.com/securityalert/4504  View
381284 34813 CVE-2008-4696 XF:opera-historysearch-xss(46003)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49664 JVNDB-2008-004974 Libera CMS の admin.php における SQL インジェクションの脆弱性 Libera CMS の admin.php には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-4700 34813 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004974.html  View