This host is installed with Opera and is prone to multiple Cross-Site Scripting vulnerabilities.

Attacker can exploit this issue to conduct XSS attacks to inject arbitrary web script or HTML. Impact Level: Application

Upgrade to version 10.1 or later, For updates refer to http://www.opera.com

An error in the application which can be exploited to obtain complete control over feeds via a 'RSS' or 'Atom' feed. It is related to the rendering of the application/rss+xml content type as 'scripted content'.

Opera version 9.x and 10.x on Windows.

• http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/
• http://www.securityfocus.com/archive/1/archive/1/506517/100/0/threaded

---

Updated on 2015-03-25