CVE-2014-3875 The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scripting (XSS) attacks
MediumCVSS 6.1
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scripting (XSS) attacks
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/fex(Debian:12) | < 20140530-1 | 20140530-1 |
| debian/fex(Debian:12) | = 20110601-1 | No fix listed |
| debian/fex(Debian:12) | = 20110608-1 | No fix listed |
| debian/fex(Debian:12) | = 20110608-2 | No fix listed |
| debian/fex(Debian:12) | = 20110610-1 | No fix listed |
| debian/fex(Debian:12) | = 20110610-2 | No fix listed |
| debian/fex(Debian:12) | = 20110620-1 | No fix listed |
| debian/fex(Debian:12) | = 20110622-1 | No fix listed |
| debian/fex(Debian:12) | = 20110726-1 | No fix listed |
| debian/fex(Debian:12) | = 20110726-1~bpo60+1 | No fix listed |
| debian/fex(Debian:12) | = 20111129-1 | No fix listed |
| debian/fex(Debian:12) | = 20111129-2 | No fix listed |
| debian/fex(Debian:12) | = 20120215-1 | No fix listed |
| debian/fex(Debian:12) | = 20120215-2 | No fix listed |
| debian/fex(Debian:12) | = 20120215-3 | No fix listed |
| debian/fex(Debian:12) | = 20120215-3~bpo60+1 | No fix listed |
| debian/fex(Debian:12) | = 20120718-1 | No fix listed |
| debian/fex(Debian:12) | = 20120718-2 | No fix listed |
| debian/fex(Debian:12) | = 20120718-3 | No fix listed |
| debian/fex(Debian:12) | = 20120718-4 | No fix listed |
| debian/fex(Debian:12) | = 20120718-5 | No fix listed |
| debian/fex(Debian:12) | = 20120930-1 | No fix listed |
| debian/fex(Debian:12) | = 20121027-1 | No fix listed |
| debian/fex(Debian:12) | = 20121107-1 | No fix listed |
| debian/fex(Debian:12) | = 20121107-1~bpo60+1 | No fix listed |
Show 36 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/fex(Debian:12) | = 20130217-1 | No fix listed |
| debian/fex(Debian:12) | = 20130510-1 | No fix listed |
| debian/fex(Debian:12) | = 20130805-1 | No fix listed |
| debian/fex(Debian:12) | = 20140226-1 | No fix listed |
| debian/fex(Debian:12) | = 20140313-1 | No fix listed |
| debian/fex(Debian:13) | < 20140530-1 | 20140530-1 |
| debian/fex(Debian:13) | = 20110601-1 | No fix listed |
| debian/fex(Debian:13) | = 20110608-1 | No fix listed |
| debian/fex(Debian:13) | = 20110608-2 | No fix listed |
| debian/fex(Debian:13) | = 20110610-1 | No fix listed |
| debian/fex(Debian:13) | = 20110610-2 | No fix listed |
| debian/fex(Debian:13) | = 20110620-1 | No fix listed |
| debian/fex(Debian:13) | = 20110622-1 | No fix listed |
| debian/fex(Debian:13) | = 20110726-1 | No fix listed |
| debian/fex(Debian:13) | = 20110726-1~bpo60+1 | No fix listed |
| debian/fex(Debian:13) | = 20111129-1 | No fix listed |
| debian/fex(Debian:13) | = 20111129-2 | No fix listed |
| debian/fex(Debian:13) | = 20120215-1 | No fix listed |
| debian/fex(Debian:13) | = 20120215-2 | No fix listed |
| debian/fex(Debian:13) | = 20120215-3 | No fix listed |
| debian/fex(Debian:13) | = 20120215-3~bpo60+1 | No fix listed |
| debian/fex(Debian:13) | = 20120718-1 | No fix listed |
| debian/fex(Debian:13) | = 20120718-2 | No fix listed |
| debian/fex(Debian:13) | = 20120718-3 | No fix listed |
| debian/fex(Debian:13) | = 20120718-4 | No fix listed |
| debian/fex(Debian:13) | = 20120718-5 | No fix listed |
| debian/fex(Debian:13) | = 20120930-1 | No fix listed |
| debian/fex(Debian:13) | = 20121027-1 | No fix listed |
| debian/fex(Debian:13) | = 20121107-1 | No fix listed |
| debian/fex(Debian:13) | = 20121107-1~bpo60+1 | No fix listed |
| debian/fex(Debian:13) | = 20130217-1 | No fix listed |
| debian/fex(Debian:13) | = 20130510-1 | No fix listed |
| debian/fex(Debian:13) | = 20130805-1 | No fix listed |
| debian/fex(Debian:13) | = 20140226-1 | No fix listed |
| debian/fex(Debian:13) | = 20140313-1 | No fix listed |
| ulli horlacher fex | < 2014053 | 2014053 |
References
- Debian Security Tracker CVE-2014-3875 third-party-advisory vendor-advisory
- packetstormsecurity.com exploit patch third-party-advisory vdb-entry
- seclists.org exploit mailing-list patch third-party-advisory
- www.openwall.com exploit mailing-list patch third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry