Ulli Horlacher

ulli_horlacher

6 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-3875 1Ulli Horlacher 1Fex Nov 21, 2024 Nov 27, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scripting (XSS) attacks
CVE-2014-3877 1Ulli Horlacher 1Fex May 6, 2026 Jun 18, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup.
CVE-2014-3876 1Ulli Horlacher 1Fex May 6, 2026 Jun 18, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (FEX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2)...Show more Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (FEX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc.Show less
CVE-2012-1293 1Ulli Horlacher 1Fex Apr 29, 2026 Sep 25, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (FEX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameter...Show more Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (FEX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.Show less
CVE-2012-0869 1Ulli Horlacher 1Fex Apr 29, 2026 Sep 25, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVE-2011-1409 1Ulli Horlacher 1Fex Apr 29, 2026 Jun 24, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.