CVE-2014-3876 in fex
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Frams Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
05/27/2014
Disclosure
06/18/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70077 | Ulli Horlacher fex cross site scripting | 79 | Not defined | Official fix | CVE-2014-3876 |