CVE-2010-4580

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sensitive information via an input field that has the same name as an input field on a previously visited web site.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Dec 22, 2010
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2010

CVE-2010-458110.0Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."CVE-2010-45825.0Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intCVE-2010-45832.6Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers tCVE-2010-45842.6Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites,CVE-2010-45855.0Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (appliCVE-2010-458610.0The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, poCVE-2010-45879.3Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for usCVE-2010-45889.3The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute CVE-2010-45894.3Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject arbitrary web script or HTML via vectors related CVE-2010-45904.3Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) beforCVE-2010-45914.4The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA CVE-2010-45924.3The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (