CVE-2014-3876

UNKNOWN

Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc

Published Jun 18, 2014

Modified 1 years ago

Details

Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc.

References

WEB

http://fex.rus.uni-stuttgart.de/fex.html

WEB

http://packetstormsecurity.com/files/126906/F-EX-20140313-1-HTTP-Response-Splitting-Cross-Site-Scripting.html

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2014-3876

WEB

https://www.lsexperts.de/advisories/lse-2014-05-22.txt

CVSS Analysis

CVSS v2.0

4.3