Vulnerability Name:

CVE-2002-0243 (CCN-45717)

Assigned:2002-02-06
Published:2002-02-06
Updated:2016-10-18
Summary:Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed.
CVSS v3 Severity:3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
7.1 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
2.6 Low (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N)
2.4 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N/E:H/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: BugTraq Mailing List, Wed Feb 06 2002 - 19:50:43 CST
Web Browsers vulnerable to the Extended HTML Form Attack

Source: MITRE
Type: CNA
CVE-2002-0243

Source: BUGTRAQ
Type: UNKNOWN
20020207 Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA)

Source: CCN
Type: Opera Web site
Opera browser

Source: CCN
Type: OSVDB ID: 57114
Opera Extended HTML Form Non-HTTP Protocol XSS

Source: XF
Type: UNKNOWN
opera-extendedhtmlform-xss(45717)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:opera_software:opera_web_browser:*:*:*:*:*:*:*:* (Version <= 6.0)

    • Configuration CCN 1:
  • cpe:/a:opera:opera_browser:6.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    opera_software opera web browser *
    opera opera browser 6.0