20020806 Opera FTP View Cross-Site Scripting Vulnerabilitymailing list
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0061.html CVE-2002-2358
Opera 6.0.x - FTP View Cross-Site Scripting
Record summary
CVE-2002-2358 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOpera 6.0.x - FTP View Cross-Site ScriptingExploitDB exploitby Eiji James YoshidaNot analyzed1 file
References
620020806 Opera FTP View Cross-Site Scripting Vulnerabilitymailing list
http://online.securityfocus.com/archive/1/286151 multiple-ftp-view-xss(9757)vdb entry
http://www.iss.net/security_center/static/9757.php opera.com
http://www.opera.com/windows/changelogs/605?session=b2a9ea38c710788c23970ba2c9a34d47 5401vdb entry
http://www.securityfocus.com/bid/5401 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-2358