CVE

Id
34814  
CVE No.
CVE-2008-4697  
Status
Candidate  
Description
The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks.  
Phase
Assigned (20081022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381285 34814 CVE-2008-4697 MLIST:[oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixes  View
381286 34814 CVE-2008-4697 URL:http://www.openwall.com/lists/oss-security/2008/10/21/6  View
381287 34814 CVE-2008-4697 MLIST:[oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes  View
381288 34814 CVE-2008-4697 URL:http://www.openwall.com/lists/oss-security/2008/10/22/5  View
381289 34814 CVE-2008-4697 CONFIRM:http://www.opera.com/docs/changelogs/freebsd/961/  View
381290 34814 CVE-2008-4697 CONFIRM:http://www.opera.com/docs/changelogs/linux/961/  View
381291 34814 CVE-2008-4697 CONFIRM:http://www.opera.com/docs/changelogs/mac/961/  View
381292 34814 CVE-2008-4697 CONFIRM:http://www.opera.com/docs/changelogs/solaris/961/  View
381293 34814 CVE-2008-4697 CONFIRM:http://www.opera.com/docs/changelogs/windows/961/  View
381294 34814 CVE-2008-4697 CONFIRM:http://www.opera.com/support/search/view/904/  View
381295 34814 CVE-2008-4697 GENTOO:GLSA-200811-01  View
381296 34814 CVE-2008-4697 URL:http://security.gentoo.org/glsa/glsa-200811-01.xml  View
381297 34814 CVE-2008-4697 SUSE:SUSE-SR:2008:022  View
381298 34814 CVE-2008-4697 URL:http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html  View
381299 34814 CVE-2008-4697 BID:31842  View
381300 34814 CVE-2008-4697 URL:http://www.securityfocus.com/bid/31842  View
381301 34814 CVE-2008-4697 SECUNIA:32538  View
381302 34814 CVE-2008-4697 URL:http://secunia.com/advisories/32538  View
381303 34814 CVE-2008-4697 VUPEN:ADV-2008-2873  View
381304 34814 CVE-2008-4697 URL:http://www.vupen.com/english/advisories/2008/2873  View
381305 34814 CVE-2008-4697 SECUNIA:32299  View
381306 34814 CVE-2008-4697 URL:http://secunia.com/advisories/32299  View
381307 34814 CVE-2008-4697 SECUNIA:32394  View
381308 34814 CVE-2008-4697 URL:http://secunia.com/advisories/32394  View
381309 34814 CVE-2008-4697 XF:opera-fastforward-xss(46004)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49665 JVNDB-2008-004975 Libera CMS の admin.php における SQL インジェクションの脆弱性 Libera CMS の admin.php には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-4701 34814 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004975.html  View