Vulnerability Details : CVE-2008-4696
Public exploit exists!
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat).
Vulnerability category: Cross site scripting (XSS)
Products affected by CVE-2008-4696
- cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*
- cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-4696
81.70%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2008-4696
-
Opera historysearch XSS
Disclosure Date: 2008-10-23First seen: 2020-04-26exploit/multi/browser/opera_historysearchCertain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to modify configuration settings and execute arbitrary commands. Affects Opera versions between 9.50
CVSS scores for CVE-2008-4696
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2008-4696
-
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-4696
-
http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf
-
http://www.opera.com/docs/changelogs/windows/961/
-
https://www.exploit-db.com/exploits/6801
-
http://security.gentoo.org/glsa/glsa-200811-01.xml
Opera: Multiple vulnerabilities (GLSA 200811-01) — Gentoo security
-
http://www.openwall.com/lists/oss-security/2008/10/22/5
-
http://www.opera.com/support/search/view/903/
Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/46003
-
http://www.openwall.com/lists/oss-security/2008/10/21/6
-
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html
-
http://www.vupen.com/english/advisories/2008/2873
-
http://www.opera.com/docs/changelogs/solaris/961/
-
http://www.opera.com/docs/changelogs/freebsd/961/
Patch
-
http://www.securityfocus.com/archive/1/497646/100/0/threaded
-
http://securityreason.com/securityalert/4504
-
http://www.opera.com/docs/changelogs/linux/961/
Patch
-
http://www.opera.com/docs/changelogs/mac/961/
Patch
-
http://www.securityfocus.com/bid/31869
Opera Web Browser History Search Input Validation VulnerabilityExploit;Patch
Jump to