CVE-2012-1293
Summary
| CVE | CVE-2012-1293 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-09-25 23:55:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ulli Horlacher | Fex | 20110609 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110610 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110614 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110615 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110616 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110621 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110622 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110627 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110630 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110701 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110714 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110716 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110722 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110726 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110727 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110730 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110731 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110803 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110807 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110808 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110809 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110810 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110811 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110813 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110826 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110829 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110830 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110901 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110905 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110906 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110907 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110919 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110920 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110921 | All | All | All |
| Application | Ulli Horlacher | Fex | 20110930 | All | All | All |
| Application | Ulli Horlacher | Fex | 20111003 | All | All | All |
| Application | Ulli Horlacher | Fex | 20111005 | All | All | All |
| Application | Ulli Horlacher | Fex | 20111013 | All | All | All |
| Application | Ulli Horlacher | Fex | 20111028 | All | All | All |
| Application | Ulli Horlacher | Fex | 20111102 | All | All | All |
| Application | Ulli Horlacher | Fex | 20111108 | All | All | All |
| Application | Ulli Horlacher | Fex | 20111115 | All | All | All |
| Application | Ulli Horlacher | Fex | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| archives.neohapsis.com/archives/bugtraq/2012-02/0109.html | af854a3a-2127-422b-91ae-364da2661108 | archives.neohapsis.com | |
| Debian -- Security Information -- DSA-2414-2 fex | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| oss-security - Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| F*EX Multiple Cross Site Scripting Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Security Advisory SA47971 - F*EX Multiple Cross-Site Scripting Vulnerabilities - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| oss-security - Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| archives.neohapsis.com/archives/bugtraq/2012-02/0112.html | af854a3a-2127-422b-91ae-364da2661108 | archives.neohapsis.com | |
| F*EX download | af854a3a-2127-422b-91ae-364da2661108 | fex.rus.uni-stuttgart.de | Patch |
| oss-security - Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Exploit |
| osvdb.org/79420 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.