CVE-2012-1293

Multiple cross-site scripting XSS vulnerabilities in fup in Frams' Fast File EXchange FEX, aka fex before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the 1 to or 2 from parameters...

CVE-2012-1293

CVE-2012-1293 concerns multiple XSS vulnerabilities in Frams’ Fast File Exchange (FEX, fex). The web interface is vulnerable to script/HTML injection via the (1) to and (2) from parameters, allowing remote attackers to execute arbitrary client-side code in a victim’s browser. The issues affect ve...