CVE-2014-3875

Published Date: Wed 27 Nov 2019
Last Modified Date: Fri 06 Dec 2019

The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scripting (XSS) attacks

Impact

Severity: MEDIUM

Exploitability Score: 8.6

Impact Score: 2.9

Attack Vector (AV): NETWORK

Attack Complexity (AC): MEDIUM

Privileges Required (PR): NONE

Availability (A): NONE

References (Advisories, Solutions, and Tools):

http://packetstormsecurity.com/files/126906/F-EX-20140313-1-HTTP-Response-Splitting-Cross-Site-Scripting.html Exploit Patch Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2014/Jun/1 Exploit Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/06/03/6 Exploit Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/67783 Third Party Advisory VDB Entry
https://security-tracker.debian.org/tracker/CVE-2014-3875 Third Party Advisory

Note: This page is generated by our securitybot and has not been checked for errors. Feed Source: NVD