| Max CVSS | 5.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-0869 | 4.3 |
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
|
29-08-2017 - 01:31 | 25-09-2012 - 23:55 | |
| CVE-2011-1409 | 5.0 |
Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.
|
17-08-2017 - 01:34 | 24-06-2011 - 20:55 | |
| CVE-2014-3877 | 4.3 |
Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup. Per: http://cwe.mitre.org/data/definitions/184.h
|
18-06-2014 - 18:27 | 18-06-2014 - 14:55 | |
| CVE-2014-3876 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter
|
18-06-2014 - 18:24 | 18-06-2014 - 14:55 | |
| CVE-2012-1293 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
|
30-10-2012 - 04:02 | 25-09-2012 - 23:55 |