CVE-2014-3875

MEDIUM 6.1CVE-2014-3875 · Published 27/11/2019 · updated 17/06/2026

In short

CVE-2014-3875 is a MEDIUM (CVSS 6.1) vulnerability affecting fex (ulli horlacher).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.9% of all vulnerabilities.
Fix: update to 2014053 or later.

Package	Affected versions	Patched versions
fex ulli_horlacher	`< 2014053`	`2014053`

Description

The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scripting (XSS) attacks

References

packetstormsecurity.com/files/126906/F-EX-20140313-1-HTTP-Response-Splitting-Cross-Site-Scripting.html · Exploit
seclists.org/fulldisclosure/2014/Jun/1 · Exploit
openwall.com/lists/oss-security/2014/06/03/6 · Exploit
securityfocus.com/bid/67783 · Third Party Advisory
security-tracker.debian.org/tracker/CVE-2014-3875 · Third Party Advisory

More vulnerabilities in fex

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fex

ulli_horlacher

< 2014053

2014053

More vulnerabilities in fex

See all →