Search Results (Refine Search)
- CPE Product Version: cpe:/a:ulli_horlacher:fex:20100208
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2014-3877 |
Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup. Published: June 18, 2014; 10:55:12 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2014-3876 |
Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc. Published: June 18, 2014; 10:55:12 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2012-1293 |
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters. Published: September 25, 2012; 7:55:01 PM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2012-0869 |
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Published: September 25, 2012; 7:55:01 PM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2011-1409 |
Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID. Published: June 24, 2011; 4:55:02 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |