CVE-2014-3876

概要

参考情報

• fex.rus.uni-stuttgart.de/fex.html · Patch
• packetstormsecurity.com/files/126906/F-EX-20140313-1-HTTP-Response-Splitting-Cross-Site-Scripting.html · Exploit
• lsexperts.de/advisories/lse-2014-05-22.txt · Exploit

fex のその他の脆弱性

• CVE-2014-3875中 6.1The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scr…
• CVE-2014-3877中 4.3Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross…
• CVE-2012-1293中 4.3Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attac…
• CVE-2012-0869中 4.3Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inje…
• CVE-2011-1409中 5.0Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authenti…