Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Opera_web_browser | Opera_software | 6.0.1 (including) | 6.0.1 (including) |
Opera_web_browser | Opera_software | 6.0.2 (including) | 6.0.2 (including) |