CVE-2003-1420

UNRATEDCross-site scripting

Description

Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header.

Affected products

opera / opera_browser6.0 – 7.02

References

MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/11423
MISChttp://www.securityfocus.com/bid/6962
MISChttp://www.securityfocus.com/archive/1/313216

Updated 8m ago · 8 sources