CVE-2008-4725
Last modified
CVE-2008-4725 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696. NOTE: some of these issues were addressed before 9.60.. EPSS estimates a 4.89% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696. NOTE: some of these issues were addressed before 9.60.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Opera | Opera Browser | 9.52 |
References
- http://secunia.com/advisories/32299Vendor Advisory
- http://secunia.com/advisories/32299Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-4725?
How severe is CVE-2008-4725?
How do I fix CVE-2008-4725?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-4719PHP remote file inclusion vulnerability in cms/classes/opene…
- CVE-2008-4720Multiple PHP remote file inclusion vulnerabilities in The Ge…
- CVE-2008-4721PHP Jabbers Post Comment 3.0 allows remote attackers to bypa…
- CVE-2008-4722Unspecified vulnerability in Sun Integrated Lights-Out Manag…
- CVE-2008-4723Multiple cross-site scripting (XSS) vulnerabilities in Mozil…
- CVE-2008-4724Multiple cross-site scripting (XSS) vulnerabilities in Googl…
- CVE-2008-4726Stack-based buffer overflow in the SFTP subsystem in GoodTec…
- CVE-2008-4727Cross-site scripting (XSS) vulnerability in the contact upda…
- CVE-2008-4728Multiple insecure method vulnerabilities in the DeployRun.De…
- CVE-2008-4729Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 Ac…
- CVE-2008-4730Cross-site scripting (XSS) vulnerability in MyID.php in phpM…
- CVE-2008-4731Multiple unspecified vulnerabilities in YaCy before 0.61 hav…
Are you affected by CVE-2008-4725?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST