CVE-2002-0898

State: Published
Severity: Not scored
Published: Apr 2, 2003
Updated: Aug 8, 2024
Reserved: Aug 16, 2002

Description

Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20020527 Reading ANY local file in Opera (GM#001-OP)mailing-list
20020527 Reading ANY local file in Opera (GM#001-OP)mailing-list
opera-browser-file-retrieval(9188)vdb-entry
http://www.opera.com/windows/changelog/log603.html
4834vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.