Bug 243182

Summary:	www-client/opera Stored Cross Site Scripting Vulnerability
Product:	Gentoo Security	Reporter:	Paweł Hajdan, Jr. (RETIRED) <phajdan.jr>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	jer
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0394.html
Whiteboard:
Package list:		Runtime testing required:	---

Description Paweł Hajdan, Jr. (RETIRED) gentoo-dev

2008-10-22 08:28:05 UTC

Another advisory link: http://www.security-assessment.com/files/advisories/20
08-10-22_Opera_Stored_Cross_Site_Scripting.pdf 

== Issue Details ==

Opera browser is vulnerable to stored Cross Site
Scripting. A malicious attacker is able to inject
arbitrary browser content through the
websites visited with the Opera browser. The code
injection is rendered into the Opera History Search
page which displays URL and a short
description of the visited pages.

Comment 1 Robert Buchholz (RETIRED) gentoo-dev

2008-10-22 09:27:17 UTC

This is fixed in 9.61, no?

*** This bug has been marked as a duplicate of bug 243060 ***