4.3

CVE-2012-1293

Exploit
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ulli Horlacher ≫ Fex Version <= 20111129
Ulli Horlacher ≫ Fex Version20110609
Ulli Horlacher ≫ Fex Version20110610
Ulli Horlacher ≫ Fex Version20110614
Ulli Horlacher ≫ Fex Version20110615
Ulli Horlacher ≫ Fex Version20110616
Ulli Horlacher ≫ Fex Version20110621
Ulli Horlacher ≫ Fex Version20110622
Ulli Horlacher ≫ Fex Version20110627
Ulli Horlacher ≫ Fex Version20110630
Ulli Horlacher ≫ Fex Version20110701
Ulli Horlacher ≫ Fex Version20110714
Ulli Horlacher ≫ Fex Version20110716
Ulli Horlacher ≫ Fex Version20110722
Ulli Horlacher ≫ Fex Version20110726
Ulli Horlacher ≫ Fex Version20110727
Ulli Horlacher ≫ Fex Version20110730
Ulli Horlacher ≫ Fex Version20110731
Ulli Horlacher ≫ Fex Version20110803
Ulli Horlacher ≫ Fex Version20110807
Ulli Horlacher ≫ Fex Version20110808
Ulli Horlacher ≫ Fex Version20110809
Ulli Horlacher ≫ Fex Version20110810
Ulli Horlacher ≫ Fex Version20110811
Ulli Horlacher ≫ Fex Version20110813
Ulli Horlacher ≫ Fex Version20110826
Ulli Horlacher ≫ Fex Version20110829
Ulli Horlacher ≫ Fex Version20110830
Ulli Horlacher ≫ Fex Version20110901
Ulli Horlacher ≫ Fex Version20110905
Ulli Horlacher ≫ Fex Version20110906
Ulli Horlacher ≫ Fex Version20110907
Ulli Horlacher ≫ Fex Version20110919
Ulli Horlacher ≫ Fex Version20110920
Ulli Horlacher ≫ Fex Version20110921
Ulli Horlacher ≫ Fex Version20110930
Ulli Horlacher ≫ Fex Version20111003
Ulli Horlacher ≫ Fex Version20111005
Ulli Horlacher ≫ Fex Version20111013
Ulli Horlacher ≫ Fex Version20111028
Ulli Horlacher ≫ Fex Version20111102
Ulli Horlacher ≫ Fex Version20111108
Ulli Horlacher ≫ Fex Version20111115
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.645
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.