← Back

CVE-2012-1293

nvd nist
Published: Sep 25, 2012Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.

Affected (43)

Products: Ulli Horlacher: Fex
Ulli Horlacher
1 product
Fex
Configuration A
43 vulnerable
Vulnerable SoftwareAffected Versions
Ulli Horlacher
Fex
Up to 20111129
Fex
Version 20110609
Fex
Version 20110610
Fex
Version 20110614
Fex
Version 20110615
Fex
Version 20110616
Fex
Version 20110621
Fex
Version 20110622
Fex
Version 20110627
Fex
Version 20110630
Fex
Version 20110701
Fex
Version 20110714
Fex
Version 20110716
Fex
Version 20110722
Fex
Version 20110726
Fex
Version 20110727
Fex
Version 20110730
Fex
Version 20110731
Fex
Version 20110803
Fex
Version 20110807
Fex
Version 20110808
Fex
Version 20110809
Fex
Version 20110810
Fex
Version 20110811
Fex
Version 20110813
Fex
Version 20110826
Fex
Version 20110829
Fex
Version 20110830
Fex
Version 20110901
Fex
Version 20110905
Fex
Version 20110906
Fex
Version 20110907
Fex
Version 20110919
Fex
Version 20110920
Fex
Version 20110921
Fex
Version 20110930
Fex
Version 20111003
Fex
Version 20111005
Fex
Version 20111013
Fex
Version 20111028
Fex
Version 20111102
Fex
Version 20111108
Fex
Version 20111115

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (20)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.