Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696. NOTE: some of these issues were addressed before 9.60.

Opera reports :

Certain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to look through the user's browsing history, including the contents of the pages they have visited. These may contain sensitive information.

If a link that uses a JavaScript URL triggers Opera's Fast Forward feature, when the user activates Fast Forward, the script should run on the current page. When a page is held in a frame, the script is incorrectly executed on the outermost page, not the page where the URL was located. This can be used to execute scripts in the context of an unrelated frame, which allows cross-site scripting.

When Opera is previewing a news feed, some scripts are not correctly blocked. These scripts are able to subscribe the user to any feed URL that the attacker chooses, and can also view the contents of any feeds that the user is subscribed to. These may contain sensitive information.

The version of Opera installed on the remote host is earlier than 9.61 and is reportedly affected by several issues : 

  - It may be possible to reveal a user's browsing history by exploiting certain constructs in Opera's History Search results (903).
  - Opera's Fast Forward feature is affected by a cross-site scripting vulnerability (904). 
  - While previewing certain news feeds, it may be possible for certain scripts to subscribe a user to arbitrary feeds, and also view contents of user subscribed feeds (905). 

The version of Opera installed on the remote host is earlier than 9.61 and thus reportedly affected by several issues :

  - It may be possible to reveal a user's browsing history     by exploiting certain constructs in Opera's History     Search results (903).
  - Opera's Fast Forward feature is affected by a cross-site     scripting vulnerability (904). 

  - While previewing certain news feeds, it may be possible     for certain scripts to subscribe an user to arbitrary     feeds, and also view contents of user subscribed feeds     (905).

ID	Name	Product	Family	Severity
34508	FreeBSD : opera -- multiple vulnerabilities (f5c4d7f7-9f4b-11dd-bab1-001999392805)	Nessus	FreeBSD Local Security Checks	medium
4715	Opera < 9.61 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
34459	Opera < 9.61 Multiple Vulnerabilities	Nessus	Windows	medium

Detections

Analytics

CVE-2008-4725

medium

Tenable Plugins

medium

medium

medium