CVE-2014-3876 in fex

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in Frams Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2014-05-27

Divulgación

2014-06-18

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
70077	Ulli Horlacher fex secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2014-3876

Fuentes

• MITRE
• NVD
• CVE Details