CVE-2014-3875

Mô tả

Tham khảo

• packetstormsecurity.com/files/126906/F-EX-20140313-1-HTTP-Response-Splitting-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2014/Jun/1 · Exploit
• openwall.com/lists/oss-security/2014/06/03/6 · Exploit
• securityfocus.com/bid/67783 · Third Party Advisory
• security-tracker.debian.org/tracker/CVE-2014-3875 · Third Party Advisory

Lỗ hổng khác của fex

• CVE-2014-3877TRUNG BÌNH 4.3Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross…
• CVE-2014-3876TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers …
• CVE-2012-1293TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attac…
• CVE-2012-0869TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inje…
• CVE-2011-1409TRUNG BÌNH 5.0Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authenti…