← Database

CVE-2005-2406

MEDIUM CVSS: 4.3 Published: 2005-08-01 Modified: 2026-06-16

Description

Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI.

Affected Platforms

Opera Opera Browser

Weakness Type

CWE-79

References