CVE-2006-6970: Opera Browser

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Opera 9.10 Final allows remote attackers to bypass the Fraud Protection mechanism by adding certain characters to the end of a domain name, as demonstrated by the "." and "/" characters, which is not caught by the blacklist filter.

Affected products

• Opera Opera Browser: version 9.10 only

Published 2007-02-07. Last modified 2026-06-16.