Description
Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to other sites via the onUnload attribute.
References
- opera-onunload-url-spoofing(16131) vdb-entry
- 10337 vdb-entry
- 6108 vdb-entry
- http://secunia.com/secunia_research/2004-2/advisory/
- 11532 third-party-advisory