CVE-2002-2358 Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL.
MediumCVSS 4.3
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera software opera web browser | = 6.0 | No fix listed |
| opera software opera web browser | = 6.0.1 | No fix listed |
| opera software opera web browser | = 6.0.2 | No fix listed |
| opera software opera web browser | = 6.0.3 | No fix listed |
| opera software opera web browser | = 6.0.4 | No fix listed |
References
- 20020806 Opera FTP View Cross-Site Scripting Vulnerability exploit mailing-list
- 20020806 Opera FTP View Cross-Site Scripting Vulnerability mailing-list
- multiple-ftp-view-xss(9757) vdb-entry
- www.opera.com
- 5401 exploit patch vdb-entry