CVE-2008-4696

Scores

EPSS

0.621medium62.1%
0%20%40%60%80%100%

Percentile: 62.1%

CVSS

4.3medium2.0
0246810

CVSS Score: 4.3/10

All CVSS Scores

CVSS 2.0
4.3

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the “optional fragment”), which is not properly escaped before storage in the History Search database (aka md.dat).

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-79

Exploits

Exploit ID: 16304

Source: exploitdb

URL: https://www.exploit-db.com/exploits/16304

Exploit ID: 6801

Source: exploitdb

URL: https://www.exploit-db.com/exploits/6801

Exploit ID: 9944

Source: exploitdb

URL: https://www.exploit-db.com/exploits/9944

Vulnerable Software (1)

Type: Configuration

Vendor: *

Product: opera

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*",      "versionEndIn...

Source: nvd

End of list