CVE-2002-0898

Published: Oct 4, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.

Affected (2)

Products: Opera Software: Opera Web Browser

Opera Software

1 product

Opera Web Browser

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Opera Software Opera Web Browser	Version 6.0.1
Opera Software Opera Web Browser	Version 6.0.2

References (10)

http://marc.info/?l=ntbugtraq&m=102256058220402&w=2

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/274202

Source: cve@mitre.org

http://www.iss.net/security_center/static/9188.php

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.opera.com/windows/changelog/log603.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/4834

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://marc.info/?l=ntbugtraq&m=102256058220402&w=2