CVE-2008-2716

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.

• CWE-1021

• http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.htmlThird Party Advisory
• http://secunia.com/advisories/30636Broken Link
• http://secunia.com/advisories/30682Broken Link
• http://www.opera.com/docs/changelogs/linux/950/#securityBroken Link, Vendor Advisory
• http://www.opera.com/docs/changelogs/windows/950/#securityBroken Link, Vendor Advisory
• http://www.opera.com/support/search/view/885/Broken Link, Vendor Advisory
• http://www.securityfocus.com/bid/29684Broken Link, Patch, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020292Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/1812Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43033Third Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.htmlThird Party Advisory
• http://secunia.com/advisories/30636Broken Link
• http://secunia.com/advisories/30682Broken Link
• http://www.opera.com/docs/changelogs/linux/950/#securityBroken Link, Vendor Advisory
• http://www.opera.com/docs/changelogs/windows/950/#securityBroken Link, Vendor Advisory
• http://www.opera.com/support/search/view/885/Broken Link, Vendor Advisory
• http://www.securityfocus.com/bid/29684Broken Link, Patch, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020292Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/1812Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43033Third Party Advisory, VDB Entry

Published

Jun 16, 2008

Last Modified

Jun 16, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2710Integer signedness error in the ip_set_srcfilter function in…
• CVE-2008-2711fetchmail 6.3.8 and earlier, when running in -v -v (aka verb…
• CVE-2008-2712Vim 7.1.314, 6.4, and other versions allows user-assisted re…
• CVE-2008-2713libclamav/petite.c in ClamAV before 0.93.1 allows remote att…
• CVE-2008-2714Opera before 9.26 allows remote attackers to misrepresent we…
• CVE-2008-2715Unspecified vulnerability in Opera before 9.5 allows remote …
• CVE-2008-2717TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x befo…
• CVE-2008-2718Cross-site scripting (XSS) vulnerability in fe_adminlib.inc …
• CVE-2008-2719Off-by-one error in the ppscan function (preproc.c) in Netwi…
• CVE-2008-2720Cross-site scripting (XSS) vulnerability in Menalto Gallery …
• CVE-2008-2721Unspecified vulnerability in the album-select module in Mena…
• CVE-2008-2722Menalto Gallery before 2.2.5 allows remote attackers to bypa…