Beveiligingsadvies
CVE-2009-3048
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a "dropped file."