CVEvulnerability

CVE-2012-1293

4.3 MEDIUM Published 2012-09-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.

Affected configurations

• ulli horlacher fex (<= 20111129) • ulli horlacher fex 20110609 • ulli horlacher fex 20110610 • ulli horlacher fex 20110614 • ulli horlacher fex 20110615 • ulli horlacher fex 20110616 • ulli horlacher fex 20110621 • ulli horlacher fex 20110622 • ulli horlacher fex 20110627 • ulli horlacher fex 20110630 • ulli horlacher fex 20110701 • ulli horlacher fex 20110714 • ulli horlacher fex 20110716 • ulli horlacher fex 20110722 • ulli horlacher fex 20110726 • ulli horlacher fex 20110727 • ulli horlacher fex 20110730 • ulli horlacher fex 20110731 • ulli horlacher fex 20110803 • ulli horlacher fex 20110807 • ulli horlacher fex 20110808 • ulli horlacher fex 20110809 • ulli horlacher fex 20110810 • ulli horlacher fex 20110811 • ulli horlacher fex 20110813 • ulli horlacher fex 20110826 • ulli horlacher fex 20110829 • ulli horlacher fex 20110830 • ulli horlacher fex 20110901 • ulli horlacher fex 20110905 • ulli horlacher fex 20110906 • ulli horlacher fex 20110907 • ulli horlacher fex 20110919 • ulli horlacher fex 20110920 • ulli horlacher fex 20110921 • ulli horlacher fex 20110930 • ulli horlacher fex 20111003 • ulli horlacher fex 20111005 • ulli horlacher fex 20111013 • ulli horlacher fex 20111028 • ulli horlacher fex 20111102 • ulli horlacher fex 20111108 • ulli horlacher fex 20111115

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References