Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat).
2008-10-23T22:00:01.433
2025-04-09T00:30:58.490
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | opera | opera | * | Yes |
| Application | opera | opera | ≤ 9.6 | Yes |
| Application | opera | opera | 5..10 | Yes |
| Application | opera | opera | 5.0 | Yes |
| Application | opera | opera | 5.1 | Yes |
| Application | opera | opera | 5.2 | Yes |
| Application | opera | opera | 5.3 | Yes |
| Application | opera | opera | 5.4 | Yes |
| Application | opera | opera | 5.5 | Yes |
| Application | opera | opera | 5.6 | Yes |
| Application | opera | opera | 5.7 | Yes |
| Application | opera | opera | 5.8 | Yes |
| Application | opera | opera | 5.9 | Yes |
| Application | opera | opera | 5.11 | Yes |
| Application | opera | opera | 5.12 | Yes |
| Application | opera | opera | 6 | Yes |
| Application | opera | opera | 6.0 | Yes |
| Application | opera | opera | 6.01 | Yes |
| Application | opera | opera | 6.02 | Yes |
| Application | opera | opera | 6.03 | Yes |
| Application | opera | opera | 6.04 | Yes |
| Application | opera | opera | 6.05 | Yes |
| Application | opera | opera | 6.06 | Yes |
| Application | opera | opera | 7 | Yes |
| Application | opera | opera | 7 | Yes |
| Application | opera | opera | 7.0 | Yes |
| Application | opera | opera | 7.0 | Yes |
| Application | opera | opera | 7.01 | Yes |
| Application | opera | opera | 7.02 | Yes |
| Application | opera | opera | 7.03 | Yes |
| Application | opera | opera | 7.10 | Yes |
| Application | opera | opera | 7.11 | Yes |
| Application | opera | opera | 7.20 | Yes |
| Application | opera | opera | 7.20 | Yes |
| Application | opera | opera | 7.21 | Yes |
| Application | opera | opera | 7.22 | Yes |
| Application | opera | opera | 7.23 | Yes |
| Application | opera | opera | 7.50 | Yes |
| Application | opera | opera | 7.50 | Yes |
| Application | opera | opera | 7.51 | Yes |
| Application | opera | opera | 7.52 | Yes |
| Application | opera | opera | 7.53 | Yes |
| Application | opera | opera | 7.54 | Yes |
| Application | opera | opera | 7.54 | Yes |
| Application | opera | opera | 7.54 | Yes |
| Application | opera | opera | 8.0 | Yes |
| Application | opera | opera | 8.0 | Yes |
| Application | opera | opera | 8.0 | Yes |
| Application | opera | opera | 8.0 | Yes |
| Application | opera | opera | 8.01 | Yes |
| Application | opera | opera | 8.02 | Yes |
| Application | opera | opera | 8.50 | Yes |
| Application | opera | opera | 8.51 | Yes |
| Application | opera | opera | 8.52 | Yes |
| Application | opera | opera | 8.53 | Yes |
| Application | opera | opera | 8.54 | Yes |
| Application | opera | opera | 9.0 | Yes |
| Application | opera | opera | 9.0 | Yes |
| Application | opera | opera | 9.0 | Yes |
| Application | opera | opera | 9.01 | Yes |
| Application | opera | opera | 9.02 | Yes |
| Application | opera | opera | 9.10 | Yes |
| Application | opera | opera | 9.20 | Yes |
| Application | opera | opera | 9.20 | Yes |
| Application | opera | opera | 9.21 | Yes |
| Application | opera | opera | 9.22 | Yes |
| Application | opera | opera | 9.23 | Yes |
| Application | opera | opera | 9.24 | Yes |
| Application | opera | opera | 9.25 | Yes |
| Application | opera | opera | 9.26 | Yes |
| Application | opera | opera | 9.27 | Yes |
| Application | opera | opera | 9.50 | Yes |
| Application | opera | opera | 9.50 | Yes |
| Application | opera | opera | 9.51 | Yes |