CVE-2012-1293 Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to o...
MediumCVSS 4.3
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/fex(Debian:12) | < 20120215-1 | 20120215-1 |
| debian/fex(Debian:12) | = 20110601-1 | No fix listed |
| debian/fex(Debian:12) | = 20110608-1 | No fix listed |
| debian/fex(Debian:12) | = 20110608-2 | No fix listed |
| debian/fex(Debian:12) | = 20110610-1 | No fix listed |
| debian/fex(Debian:12) | = 20110610-2 | No fix listed |
| debian/fex(Debian:12) | = 20110620-1 | No fix listed |
| debian/fex(Debian:12) | = 20110622-1 | No fix listed |
| debian/fex(Debian:12) | = 20110726-1 | No fix listed |
| debian/fex(Debian:12) | = 20110726-1~bpo60+1 | No fix listed |
| debian/fex(Debian:12) | = 20111129-1 | No fix listed |
| debian/fex(Debian:12) | = 20111129-2 | No fix listed |
| debian/fex(Debian:13) | < 20120215-1 | 20120215-1 |
| debian/fex(Debian:13) | = 20110601-1 | No fix listed |
| debian/fex(Debian:13) | = 20110608-1 | No fix listed |
| debian/fex(Debian:13) | = 20110608-2 | No fix listed |
| debian/fex(Debian:13) | = 20110610-1 | No fix listed |
| debian/fex(Debian:13) | = 20110610-2 | No fix listed |
| debian/fex(Debian:13) | = 20110620-1 | No fix listed |
| debian/fex(Debian:13) | = 20110622-1 | No fix listed |
| debian/fex(Debian:13) | = 20110726-1 | No fix listed |
| debian/fex(Debian:13) | = 20110726-1~bpo60+1 | No fix listed |
| debian/fex(Debian:13) | = 20111129-1 | No fix listed |
| debian/fex(Debian:13) | = 20111129-2 | No fix listed |
| ulli horlacher fex | <= 20111129 | No fix listed |
Show 42 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ulli horlacher fex | = 20110609 | No fix listed |
| ulli horlacher fex | = 20110610 | No fix listed |
| ulli horlacher fex | = 20110614 | No fix listed |
| ulli horlacher fex | = 20110615 | No fix listed |
| ulli horlacher fex | = 20110616 | No fix listed |
| ulli horlacher fex | = 20110621 | No fix listed |
| ulli horlacher fex | = 20110622 | No fix listed |
| ulli horlacher fex | = 20110627 | No fix listed |
| ulli horlacher fex | = 20110630 | No fix listed |
| ulli horlacher fex | = 20110701 | No fix listed |
| ulli horlacher fex | = 20110714 | No fix listed |
| ulli horlacher fex | = 20110716 | No fix listed |
| ulli horlacher fex | = 20110722 | No fix listed |
| ulli horlacher fex | = 20110726 | No fix listed |
| ulli horlacher fex | = 20110727 | No fix listed |
| ulli horlacher fex | = 20110730 | No fix listed |
| ulli horlacher fex | = 20110731 | No fix listed |
| ulli horlacher fex | = 20110803 | No fix listed |
| ulli horlacher fex | = 20110807 | No fix listed |
| ulli horlacher fex | = 20110808 | No fix listed |
| ulli horlacher fex | = 20110809 | No fix listed |
| ulli horlacher fex | = 20110810 | No fix listed |
| ulli horlacher fex | = 20110811 | No fix listed |
| ulli horlacher fex | = 20110813 | No fix listed |
| ulli horlacher fex | = 20110826 | No fix listed |
| ulli horlacher fex | = 20110829 | No fix listed |
| ulli horlacher fex | = 20110830 | No fix listed |
| ulli horlacher fex | = 20110901 | No fix listed |
| ulli horlacher fex | = 20110905 | No fix listed |
| ulli horlacher fex | = 20110906 | No fix listed |
| ulli horlacher fex | = 20110907 | No fix listed |
| ulli horlacher fex | = 20110919 | No fix listed |
| ulli horlacher fex | = 20110920 | No fix listed |
| ulli horlacher fex | = 20110921 | No fix listed |
| ulli horlacher fex | = 20110930 | No fix listed |
| ulli horlacher fex | = 20111003 | No fix listed |
| ulli horlacher fex | = 20111005 | No fix listed |
| ulli horlacher fex | = 20111013 | No fix listed |
| ulli horlacher fex | = 20111028 | No fix listed |
| ulli horlacher fex | = 20111102 | No fix listed |
| ulli horlacher fex | = 20111108 | No fix listed |
| ulli horlacher fex | = 20111115 | No fix listed |
References
- Debian Security Tracker CVE-2012-1293 vendor-advisory
- 20120220 Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. mailing-list
- 20120220 Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. mailing-list
- fex.rus.uni-stuttgart.de patch
- 79420 vdb-entry
- 47971 third-party-advisory vendor-advisory
- DSA-2414 vendor-advisory
- [oss-security] 20120220 Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. exploit mailing-list
- [oss-security] 20120220 Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. mailing-list
- [oss-security] 20120223 Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. mailing-list
- 52085 vdb-entry
- bugs.debian.org issue-tracking