Description
Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a "dropped file."
Unscored
CVE-2009-3048
EUVD-2009-3032GHSA-9hgg-vhrm-7vx2
Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote atta…
Published Sep 2, 2009 · Updated Aug 7, 2024 · Assigned by mitre