Description
Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection.
References
- 2488 third-party-advisory
- 20070328 Bypass phishing protection in Firefox / Opera mailing-list
- opera-url-security-bypass(33488) vdb-entry