cbcvebase.
CVE-2009-3048
published 2009-09-02

CVE-2009-3048: Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a…

PriorityP420medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.69%
74.2th percentile
Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a "dropped file."

Affected

77 ranges· showing 25
VendorProductVersion rangeFixed in
operaopera_browser<= 10.00—
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
operaopera_browser——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.