Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
opera opera browser 9.10 |
||
opera opera browser 7.23 |
||
opera opera browser 8.0 |
||
opera opera browser 9.01 |
||
opera opera browser 9.0 |
||
opera opera browser 7.53 |
||
opera opera browser 8.51 |
||
opera opera browser 8.53 |
||
opera opera browser 9.20 |
||
opera opera browser 9.12 |
||
opera opera browser 9.02 |
||
opera opera browser 9.21 |
||
opera opera browser 8.54 |
||
opera opera browser 8.01 |
||
opera opera browser 7.60 |
||
opera opera browser 8.52 |
||
opera opera browser 7.54 |
||
opera opera browser 7.0 |
||
opera opera browser 8.02 |
||
opera opera browser 8.50 |
||
opera opera browser |
Vulmon