CVE-2008-4696 json
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML v…
published 2008-10-23 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-4676
- cvss
- 4.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 45.7%
- EPSS 45.7% chance of exploitation in 30 days, percentile 98%
- public exploits
- 4
- Metasploit, Exploit-DB
Summary
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat).
Patch / fix
Timeline
- First public exploit (EDB-6801)
- Published
Exploit prediction
45.73% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/multi/browser/opera_historysearch Opera historysearch XSS metasploit exploit, excellent rank, 2008-10-23
- EDB-16304 Opera historysearch - Cross-Site Scripting (Metasploit) remote, 2010-11-11
- EDB-9944 Opera 9.50/9.61 historysearch - Command Execution (Metasploit) remote, 2008-10-23
- EDB-6801 Opera 9.60 - Persistent Cross-Site Scripting remote, 2008-10-22
- securityfocus.com http://www.securityfocus.com/bid/31869 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Classification
- Weakness
-
- CWE-79 Improper Neutralization of Input During Web Page Generation
References
-
opera.com
/docs/changelogs/mac/961/
patch
-
securityfocus.com
/bid/31869
vdb-entry, exploit, patch
-
opera.com
/docs/changelogs/linux/961/
patch
-
opera.com
/docs/changelogs/freebsd/961/
patch
-
exploit-db.com
/exploits/6801
exploit
-
lists.opensuse.org
/opensuse-security-announce/2008-10/msg00009.html
vendor-advisory
-
security.gentoo.org
/glsa/glsa-200811-01.xml
vendor-advisory
-
secunia.com
/advisories/32299
third-party-advisory, vendor-advisory
-
opera.com
/support/search/view/903/
vendor-advisory
-
secunia.com
/advisories/32394
third-party-advisory
-
vupen.com
/english/advisories/2008/2873
vdb-entry
-
openwall.com
/lists/oss-security/2008/10/21/6
mailing-list
-
secunia.com
/advisories/32538
third-party-advisory
- opera.com /docs/changelogs/solaris/961/
- security-assessment.com /files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf
-
openwall.com
/lists/oss-security/2008/10/22/5
mailing-list
- opera.com /docs/changelogs/windows/961/
-
exchange.xforce.ibmcloud.com
/vulnerabilities/46003
vdb-entry
-
securityreason.com
/securityalert/4504
third-party-advisory
-
securityfocus.com
/archive/1/497646/100/0/threaded
mailing-list
Sources
- CVE List CVE-2008-4696
- NVD CVE-2008-4696
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.