CVE-2012-1293

Ulli Horlacher Fex < 20111129 - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.

References (10)

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html

[Patch] http://fex.rus.uni-stuttgart.de/fex.html

[Vendor Advisory] http://secunia.com/advisories/47971

[Exploit] http://www.openwall.com/lists/oss-security/2012/02/20/1

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/52085

[Third Party Advisory] http://www.debian.org/security/2012/dsa-2414

[Mailing List] http://www.openwall.com/lists/oss-security/2012/02/20/8

[Mailing List] http://www.openwall.com/lists/oss-security/2012/02/23/2

[Third Party Advisory, VDB Entry] http://osvdb.org/79420

Scores

EPSS 0.0053

EPSS Percentile 66.9%

Classification

CWE

CWE-79

Status published

Affected Products (44)

ulli_horlacher/fex < 20111129

ulli_horlacher/fex

... and 29 more

Timeline

Published Sep 25, 2012

Tracked Since Feb 18, 2026