Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Opera本地文件泄露漏洞
Vulnerability Description
Opera是一款流行的Web浏览器,可使用在多种Unix和Linux操作系统下,也可运行在Microsoft Windows操作系统下。 Opera在处理'file' HTML输入类型时存在漏洞,可导致远程攻击者获得Opera客户端系统中的任意文件。 Opera浏览器支持<input type="file">类型,这是一个用于用户上载文件到HTTP服务器的标准模式,由于牵涉到安全问题,多数浏览器不允许设置"value"类型,如果此"value"设置为任意值,就可能导致攻击者服务器获得客户端系统的本地文件。
CVSS Information
N/A
Vulnerability Type
N/A