CVE-2014-3877 in fex
Résumé (Anglaise)
Incomplete blacklist vulnerability in Frams Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Réserver
27/05/2014
Divulgation
18/06/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 70078 | Ulli Horlacher fex élévation de privilèges | 184 | Non défini | Correctif officiel | CVE-2014-3877 |