NetSight
IP …
medium4.3

CVE-2009-3048

Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a use…

Impact

Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a "dropped file."

Affected products

VendorProductAffected versions
OperaOpera Browser
through 10.00
Versions 1.00, 2.00, 2.10, 2.12, 3.00

Weakness classification

CWE-20

References