Filtered by vendor Ulli Horlacher Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-3877 1 Ulli Horlacher 1 Fex 2024-11-21 N/A
Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup.
CVE-2014-3876 1 Ulli Horlacher 1 Fex 2024-11-21 N/A
Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc.
CVE-2014-3875 1 Ulli Horlacher 1 Fex 2024-11-21 6.1 Medium
The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scripting (XSS) attacks
CVE-2012-1293 1 Ulli Horlacher 1 Fex 2024-11-21 N/A
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
CVE-2012-0869 1 Ulli Horlacher 1 Fex 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVE-2011-1409 1 Ulli Horlacher 1 Fex 2024-11-21 N/A
Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.