CVE-2014-3876

CVE-2014-3876 relates to Frams’ Fast File Exchange (Fex) prior to fex-20140530, where multiple XSS vulnerabilities allow an attacker to inject script/HTML via the (1) akey parameter to rup, (2) disclaimer, or (3) gm parameter to fuc. The related OpenVAS entry confirms “Frams&qt Fast File EXchange...

CVE-2014-3877

CVE-2014-3877 affects Frams"e; Fast File EXchange (F*EX, fex) prior to fex-20140530. The issue is an incomplete blacklist that allows remote XSS via the addto parameter to fup. Connected advisories confirm multiple vendors/publications (e.g., Debian DLA-68-1) documenting fex exposure and release ...

CVE-2014-3876

Multiple cross-site scripting XSS vulnerabilities in Frams' Fast File EXchange FEX, aka fex before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the 1 akey parameter to rup or 2 disclaimer or 3 gm parameter to fuc...

CVE-2014-3877: Undefined Security Weakness

Incomplete blacklist vulnerability in Frams' Fast File EXchange FEX, aka fex before fex-20140530 allows remote attackers to conduct cross-site scripting XSS attacks via the addto parameter to fup...

PT-2014-5570

Name of the Vulnerable Software and Affected Versions Frams' Fast File EXchange FEX, aka fex versions prior to fex-20140530 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks via the addto parameter to fup. This is due to an incomplete blacklist vulnerabilit...

PT-2014-5569

Name of the Vulnerable Software and Affected Versions Frams' Fast File EXchange FEX, aka fex versions prior to fex-20140530 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the akey parameter to the "rup" endpoint, or through the...

LSE Leading Security Experts GmbH - LSE-2014-05-22 - F*EX - Multiple Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts GmbH - Security Advisory 2014-05-22 === FEX Frams' Fast File EXchange - Multiple Issues - - --------------------------------------------------------------------- Affected Versions ================= FEX Frams' Fast File...

F*EX 20140313-1 HTTP Response Splitting / Cross Site Scripting

FEX version 20140313-1 suffers from HTTP response splitting and cross site scripting vulnerabilities. FEX Frams' Fast File EXchange - Multiple Issues - - --------------------------------------------------------------------- Affected Versions ================= FEX Frams' Fast File EXchange...

F*EX 20140313-1 HTTP Response Splitting / Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts GmbH - Security Advisory 2014-05-22 === FEX Frams' Fast File EXchange - Multiple Issues - - --------------------------------------------------------------------- Affected Versions ================= FEX Frams' Fast File...

Aleph 500 SQL Injection

Greetings: I found on a ALEPH500 Integrated library management system SQL Injection Vulnerabilityï¼›CVE-ID is CVE-2014-3719. Aleph 500, fully meet the industry standard, is an art class perfect librarysolution, the Ex Libris to pursue the essence of philosophy is flexible and easy to use. Ex Libr...

Aleph 500 Cross Site Scripting

Greetings: a ALEPH500 Integrated library management system Cross Site Scripting£»CVE-ID is CVE-2014-3718. Aleph 500, fully meet the industry standard, is an art class perfect librarysolution, the Ex Libris to pursue the essence of philosophy is flexible and easy to use. Ex Libris is the world...

Fedora Update for drupal7-ctools FEDORA-2014-2578

Check for the Version of drupal7-ctools OpenVAS Vulnerability Test Fedora Update for drupal7-ctools FEDORA-2014-2578 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

WordPress Slimstat Ex Code Execution

Exploit Title: WP plugins wp-slimstat-ex execute arbitrary PHP code Exploit Google Dork: inurl:/wp-content/plugins/wp-slimstat-ex// inurl:wp-content/plugins/wp-slimstat-ex/ Date: 03-10-2013 Exploit Author: wantexz Vendor Homepage:http://wordpress.org/ Software Link: http://wordpress.org// Version...

Tech-ex 6. x~8. x getshell 0day-vulnerability warning-the black bar safety net

Brief description: Not on the submitted parameter is determined, the result can be written to any file on the server... Detailed description: Wap/Plus/PhotoVote. asp 1 4 - 2 3 Dim KS:Set KS=New PublicCls Dim ID:ID = ReplaceKS. S"ID"," ","" Dim ChannelID:ChannelID=KS. G"ChannelID" If ChannelID=""...

Fedora Update for drupal6-ctools FEDORA-2012-19449

Check for the Version of drupal6-ctools OpenVAS Vulnerability Test Fedora Update for drupal6-ctools FEDORA-2012-19449 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Tech-ex kesioncms7. 0 arbitrary File Download vulnerability-vulnerability warning-the black bar safety net

Tech-ex kesioncms7 vulnerability, is a high-risk vulnerability Vulnerability detection method: The first registered user login, Access/user/Contributor. asp can see a few can contribute to the classification, select the software submission. Point the next step! Then skip to:/user/UserMySoftWare...

CVE-2012-0869

Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2012-0869

Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2012-1293

Multiple cross-site scripting XSS vulnerabilities in fup in Frams' Fast File EXchange FEX, aka fex before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the 1 to or 2 from parameters...