XSS in Opera Browser

CVE-2005-2406

Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.022 (80.9th percentile) — read the EPSS interpretation.

Affected products

Opera Opera_browser — versions 8.01
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Broken Link)
cve@mitre.org (vdb-entry, Broken Link, x_refsource_VUPEN)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
cve@mitre.org (Patch, x_refsource_SECUNIA, Broken Link, third-party-advisory)