Description
Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI.
References
- http://www.opera.com/linux/changelogs/802/
- ADV-2005-1251 vdb-entry
- 14410 vdb-entry
- 1014593 vdb-entry
- 15756 third-party-advisory