VDB
CVE-2008-4696
CVE-2008-4696
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat).
EPSS 62.12% · 98.4th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
62.12%
98.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| opera | opera | 0, 5..10, 5.0 |
Timeline
- Oct 22, 2008 PoC Published
- Oct 23, 2008 PoC Published
- Oct 23, 2008 CVE Published
- Nov 11, 2010 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
References
- 32394 third-party-advisory
- http://www.opera.com/docs/changelogs/mac/961/ url
- ADV-2008-2873 vdb
- [oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixes mailing-list
- 32538 third-party-advisory
- 32299 third-party-advisory
- http://www.opera.com/docs/changelogs/solaris/961/ url
- http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf url
- [oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes mailing-list
- 31869 vdb
- http://www.opera.com/docs/changelogs/windows/961/ url
- 6801 exploit
- opera-historysearch-xss(46003) vdb
- http://www.opera.com/docs/changelogs/linux/961/ url
- SUSE-SR:2008:022 vendor-advisory
- http://www.opera.com/support/search/view/903/ url
- 4504 third-party-advisory
- http://www.opera.com/docs/changelogs/freebsd/961/ url
- 20081022 Opera Stored Cross Site Scripting Vulnerability mailing-list
- GLSA-200811-01 vendor-advisory
…and 7 more