{"api_version":"1","generated_at":"2026-07-23T09:13:39+00:00","cve":"CVE-2008-4725","urls":{"html":"https://cve.report/CVE-2008-4725","api":"https://cve.report/api/cve/CVE-2008-4725.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-4725","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-4725"},"summary":{"title":"CVE-2008-4725","description":"Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696.  NOTE: some of these issues were addressed before 9.60.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-10-23 22:00:01","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.opera.com/support/search/view/903/","name":"http://www.opera.com/support/search/view/903/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Advisory: History Search can reveal browsing history - Opera Knowledge Base","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/6801","name":"https://www.exploit-db.com/exploits/6801","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Opera 9.60 - Persistent Cross-Site Scripting - Windows remote Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/2873","name":"http://www.vupen.com/english/advisories/2008/2873","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.opera.com/docs/changelogs/windows/961/","name":"http://www.opera.com/docs/changelogs/windows/961/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Opera 9.61 for Windows Changelog","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf","name":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Risks in POS Systems: The Importance of a Security Assessment","mime":"application/pdf","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","name":"http://www.openwall.com/lists/oss-security/2008/10/22/5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request: Opera 9.60 with security fixes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46003","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46003","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31869","name":"http://www.securityfocus.com/bid/31869","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Opera Web Browser History Search Input Validation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/4504","name":"http://securityreason.com/securityalert/4504","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Opera Stored Cross Site Scripting Vulnerability - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/32299","name":"http://secunia.com/advisories/32299","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Opera Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/497646/100/0/threaded","name":"http://www.securityfocus.com/archive/1/497646/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.opera.com/docs/changelogs/linux/961/","name":"http://www.opera.com/docs/changelogs/linux/961/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Opera 9.61 for Linux Changelog","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.opera.com/docs/changelogs/freebsd/961/","name":"http://www.opera.com/docs/changelogs/freebsd/961/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"How can we help you? - Opera Help","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6","name":"http://www.openwall.com/lists/oss-security/2008/10/21/6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request: Opera 9.60 with security fixes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.opera.com/docs/changelogs/solaris/961/","name":"http://www.opera.com/docs/changelogs/solaris/961/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Opera 9.61 for Solaris Changelog","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.opera.com/docs/changelogs/mac/961/","name":"http://www.opera.com/docs/changelogs/mac/961/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Opera 9.61 for Mac Changelog","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46231","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46231","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4725","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4725","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"4725","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"opera","cpe5":"opera_browser","cpe6":"9.52","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T10:24:21.114Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ADV-2008-2873","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2873"},{"name":"[oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.opera.com/docs/changelogs/freebsd/961/"},{"name":"32299","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32299"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf"},{"name":"[oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5"},{"name":"opera-opera-querystring-xss(46231)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46231"},{"name":"31869","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31869"},{"name":"6801","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/6801"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.opera.com/docs/changelogs/mac/961/"},{"name":"opera-historysearch-xss(46003)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46003"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.opera.com/docs/changelogs/solaris/961/"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.opera.com/support/search/view/903/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.opera.com/docs/changelogs/linux/961/"},{"name":"4504","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/4504"},{"name":"20081022 Opera Stored Cross Site Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/497646/100/0/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.opera.com/docs/changelogs/windows/961/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-10-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696.  NOTE: some of these issues were addressed before 9.60."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"ADV-2008-2873","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2873"},{"name":"[oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixes","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6"},{"tags":["x_refsource_MISC"],"url":"http://www.opera.com/docs/changelogs/freebsd/961/"},{"name":"32299","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32299"},{"tags":["x_refsource_MISC"],"url":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf"},{"name":"[oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5"},{"name":"opera-opera-querystring-xss(46231)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46231"},{"name":"31869","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31869"},{"name":"6801","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/6801"},{"tags":["x_refsource_MISC"],"url":"http://www.opera.com/docs/changelogs/mac/961/"},{"name":"opera-historysearch-xss(46003)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46003"},{"tags":["x_refsource_MISC"],"url":"http://www.opera.com/docs/changelogs/solaris/961/"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.opera.com/support/search/view/903/"},{"tags":["x_refsource_MISC"],"url":"http://www.opera.com/docs/changelogs/linux/961/"},{"name":"4504","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/4504"},{"name":"20081022 Opera Stored Cross Site Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/497646/100/0/threaded"},{"tags":["x_refsource_MISC"],"url":"http://www.opera.com/docs/changelogs/windows/961/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-4725","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696.  NOTE: some of these issues were addressed before 9.60."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2008-2873","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2873"},{"name":"[oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixes","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2008/10/21/6"},{"name":"http://www.opera.com/docs/changelogs/freebsd/961/","refsource":"MISC","url":"http://www.opera.com/docs/changelogs/freebsd/961/"},{"name":"32299","refsource":"SECUNIA","url":"http://secunia.com/advisories/32299"},{"name":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf","refsource":"MISC","url":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf"},{"name":"[oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2008/10/22/5"},{"name":"opera-opera-querystring-xss(46231)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46231"},{"name":"31869","refsource":"BID","url":"http://www.securityfocus.com/bid/31869"},{"name":"6801","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/6801"},{"name":"http://www.opera.com/docs/changelogs/mac/961/","refsource":"MISC","url":"http://www.opera.com/docs/changelogs/mac/961/"},{"name":"opera-historysearch-xss(46003)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46003"},{"name":"http://www.opera.com/docs/changelogs/solaris/961/","refsource":"MISC","url":"http://www.opera.com/docs/changelogs/solaris/961/"},{"name":"http://www.opera.com/support/search/view/903/","refsource":"CONFIRM","url":"http://www.opera.com/support/search/view/903/"},{"name":"http://www.opera.com/docs/changelogs/linux/961/","refsource":"MISC","url":"http://www.opera.com/docs/changelogs/linux/961/"},{"name":"4504","refsource":"SREASON","url":"http://securityreason.com/securityalert/4504"},{"name":"20081022 Opera Stored Cross Site Scripting Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/497646/100/0/threaded"},{"name":"http://www.opera.com/docs/changelogs/windows/961/","refsource":"MISC","url":"http://www.opera.com/docs/changelogs/windows/961/"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-4725","datePublished":"2008-10-23T21:00:00.000Z","dateReserved":"2008-10-23T00:00:00.000Z","dateUpdated":"2024-08-07T10:24:21.114Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-10-23 22:00:01","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"4725","Ordinal":"1","Title":"CVE-2008-4725","CVE":"CVE-2008-4725","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"4725","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696.  NOTE: some of these issues were addressed before 9.60.","Type":"Description","Title":"CVE-2008-4725"},{"CveYear":"2008","CveId":"4725","Ordinal":"2","NoteData":"2008-10-23","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"4725","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}