17 matches found
Malicious code in @zalastax/nolb-fup (npm)
The package @zalastax/nolb-fup was found to contain malicious code...
MAL-2025-11553 Malicious code in @zalastax/nolb-fup (npm)
The package @zalastax/nolb-fup was found to contain malicious code...
DEBIAN-CVE-2014-3875
The addto parameter to fup in Frams' Fast File EXchange FEX, aka fex before fex-2014053 allows remote attackers to conduct cross-site scripting XSS attacks...
CVE-2014-3875
The addto parameter to fup in Frams' Fast File EXchange FEX, aka fex before fex-2014053 allows remote attackers to conduct cross-site scripting XSS attacks...
PT-2019-7107
Name of the Vulnerable Software and Affected Versions Frams' Fast File EXchange FEX, aka fex versions prior to fex-2014053 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks via the addto parameter to fup in Frams' Fast File EXchange. Recommendations For...
CVE-2014-3875: Improper Neutralization of Input During Web Page Generation
The addto parameter to fup in Frams' Fast File EXchange FEX, aka fex before fex-2014053 allows remote attackers to conduct cross-site scripting XSS attacks...
CVE-2014-3877
Incomplete blacklist vulnerability in Frams' Fast File EXchange FEX, aka fex before fex-20140530 allows remote attackers to conduct cross-site scripting XSS attacks via the addto parameter to fup...
CVE-2014-3877
Incomplete blacklist vulnerability in Frams' Fast File EXchange FEX, aka fex before fex-20140530 allows remote attackers to conduct cross-site scripting XSS attacks via the addto parameter to fup...
CVE-2014-3877: Undefined Security Weakness
Incomplete blacklist vulnerability in Frams' Fast File EXchange FEX, aka fex before fex-20140530 allows remote attackers to conduct cross-site scripting XSS attacks via the addto parameter to fup...
PT-2014-5570
Name of the Vulnerable Software and Affected Versions Frams' Fast File EXchange FEX, aka fex versions prior to fex-20140530 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks via the addto parameter to fup. This is due to an incomplete blacklist vulnerabilit...
CVE-2012-0869
Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2012-0869
Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2012-0869
Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2012-1293
Multiple cross-site scripting XSS vulnerabilities in fup in Frams' Fast File EXchange FEX, aka fex before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the 1 to or 2 from parameters...
CVE-2012-0869: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2012-1293: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in fup in Frams' Fast File EXchange FEX, aka fex before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the 1 to or 2 from parameters...