Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header.

The remote host is using a version of Opera that is prone to a security flaw where a malicious attacker can inject malicious data into a URI.  Such an attack would require that the attacker be able to convince an Opera user to browse to a malicious URI.  Successful exploitation would result in the attacker gaining access to confidential data (such as authentication cookies) or executing code within the browser.  

The version of Opera installed on the remote host is earlier than 8.01 and thus reportedly affected by multiple issues :

  - It may be possible for a malicious website to spoof     dialog boxes.

  - It may be possible for a XMLHttpRequest object to gain     unauthorized access to sensitive data.

  - The installed version is affected by multiple cross-site     scripting vulnerabilities.

  - When using the GET form, file path information could be     disclosed.

The remote host is using Opera. The version installed is vulnerable to various security flaws, ranging from cross-site scripting to buffer overflows. To exploit them, an attacker would need to set up a rogue web site, then lure a user of this host visit it using Opera. An attacker would then be able to execute arbitrary code on this host.

The version of Opera installed on the remote host is vulnerable to various security flaws, ranging from cross-site scripting to buffer overflows. 

To exploit them, an attacker would need to set up a rogue website, then lure a user of this host visit it using Opera.  He would then be able to execute arbitrary code on this host.

The remote host is using a version of Opera that is prone to a security flaw where a malicious attacker can inject malicious data into a URI.  Such an attack would require that the attacker be able to convince an Opera user to browse to a malicious URI.  Successful exploitation would result in the attacker gaining access to confidential data (such as authentication cookies) or executing code within the browser.

ID	Name	Product	Family	Severity
3015	Opera Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
18503	Opera < 8.01 Multiple Vulnerabilities	Nessus	Windows	medium
1764	Opera < 7.0.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
11404	Opera < 7.03 Multiple Vulnerabilities	Nessus	Windows	high
800842	Opera < 7.0.3 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
800832	Opera Multiple Injection Vulnerabilities	Log Correlation Engine	Web Clients	medium

Detections

Analytics

CVE-2003-1420

medium

Tenable Plugins

medium

medium

high

high

high

medium