CVE-2012-1293 (GCVE-0-2012-1293)

Vulnerability from cvelistv5 – Published: 2012-09-25 23:00 – Updated: 2024-08-06 18:53
VLAI
Summary
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
http://www.debian.org/security/2012/dsa-2414 vendor-advisoryx_refsource_DEBIAN
http://fex.rus.uni-stuttgart.de/fex.html x_refsource_CONFIRM
http://archives.neohapsis.com/archives/bugtraq/20… mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/47971 third-party-advisoryx_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2012/02/23/2 mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2012/02/20/1 mailing-listx_refsource_MLIST
http://osvdb.org/79420 vdb-entryx_refsource_OSVDB
http://www.openwall.com/lists/oss-security/2012/02/20/8 mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/52085 vdb-entryx_refsource_BID
http://archives.neohapsis.com/archives/bugtraq/20… mailing-listx_refsource_BUGTRAQ
Date Public
2012-02-20 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:53:36.940Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2414",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2414"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://fex.rus.uni-stuttgart.de/fex.html"
          },
          {
            "name": "20120220 Re: Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html"
          },
          {
            "name": "47971",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/47971"
          },
          {
            "name": "[oss-security] 20120223 Re: Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/02/23/2"
          },
          {
            "name": "[oss-security] 20120220 Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/02/20/1"
          },
          {
            "name": "79420",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/79420"
          },
          {
            "name": "[oss-security] 20120220 Re: Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/02/20/8"
          },
          {
            "name": "52085",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/52085"
          },
          {
            "name": "20120220 Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-02-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams\u0027 Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2012-10-30T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-2414",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2414"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://fex.rus.uni-stuttgart.de/fex.html"
        },
        {
          "name": "20120220 Re: Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html"
        },
        {
          "name": "47971",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/47971"
        },
        {
          "name": "[oss-security] 20120223 Re: Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/02/23/2"
        },
        {
          "name": "[oss-security] 20120220 Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/02/20/1"
        },
        {
          "name": "79420",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/79420"
        },
        {
          "name": "[oss-security] 20120220 Re: Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/02/20/8"
        },
        {
          "name": "52085",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/52085"
        },
        {
          "name": "20120220 Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1293",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams\u0027 Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2414",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2414"
            },
            {
              "name": "http://fex.rus.uni-stuttgart.de/fex.html",
              "refsource": "CONFIRM",
              "url": "http://fex.rus.uni-stuttgart.de/fex.html"
            },
            {
              "name": "20120220 Re: Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html"
            },
            {
              "name": "47971",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/47971"
            },
            {
              "name": "[oss-security] 20120223 Re: Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2012/02/23/2"
            },
            {
              "name": "[oss-security] 20120220 Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2012/02/20/1"
            },
            {
              "name": "79420",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/79420"
            },
            {
              "name": "[oss-security] 20120220 Re: Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2012/02/20/8"
            },
            {
              "name": "52085",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/52085"
            },
            {
              "name": "20120220 Vulnerabilitites in Debian F*EX \u003c= 20100208 and F*EX 20111129-2.",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1293",
    "datePublished": "2012-09-25T23:00:00.000Z",
    "dateReserved": "2012-02-23T00:00:00.000Z",
    "dateUpdated": "2024-08-06T18:53:36.940Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2012-1293",
      "date": "2026-07-05",
      "epss": "0.02564",
      "percentile": "0.83225"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"20111129\", \"matchCriteriaId\": \"72C3A3CD-9F1D-42E6-BDDA-C4F174374FE7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110609:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DADCE79F-F50A-4431-A58F-D5F773D76DE6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110610:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D2AE8C15-046B-4281-A6C9-C84B8413D9ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110614:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DF7863E7-E72A-4FDA-9C9B-5C9C97A45E4D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110615:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EFFC1CCE-F81C-4B9F-9C68-49A0E2F84C8B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110616:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EABE0285-A874-406D-A043-B150A9ABAA8F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110621:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9474467C-1F7F-44A8-83C1-BCF8FE2F970D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110622:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3DB326FA-5105-43ED-8BF3-F446EA4A08AB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110627:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2A48C83-D915-4C93-AFF8-2EF8B18AB4A3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110630:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"248ECC97-B408-4414-A270-B447E30AD9C3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110701:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6A788C3A-A780-4A8C-BB95-0D2C8586166E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110714:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CCA354F9-B1A3-4BF1-964D-06F59861D9BC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110716:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B4ACFDED-A4BF-4441-85F8-015EDF912B01\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110722:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"93158A38-82B0-4737-9E5C-B817C6DB44E7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110726:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF798673-E9C7-4663-A039-21AAB9BF4F2D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110727:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1F18DC45-687B-4C97-9D26-C0EB9ABB8536\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110730:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A0763EA8-8CED-4F93-B924-22B12357A07A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110731:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EC0A983A-B8DE-4E40-A92C-AC81BAF6A8FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110803:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0CDCBA0-1BC9-4A4E-8BC4-C8A2F410EEAA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110807:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"90649682-6B07-4858-987E-B3D8EC407525\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110808:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8C950549-BA30-4AF3-8A8C-791EF04296B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110809:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E2E84D68-4A4C-4B1B-9D85-D48D166B4C01\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110810:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F721923E-1A9E-40D5-AFA9-1367D14A7C28\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110811:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"098AC745-43E7-43BC-803C-205FA6A1791C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110813:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"54DB36F4-9475-4A18-AC5D-CC236F622410\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110826:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"41CEA8B2-EA87-4B72-9BCE-DA37B77769C9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110829:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9F2AEEBC-92D1-42B4-BADD-5E77008119D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110830:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4243748-88C8-40A0-917B-A9F33E5D171A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110901:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"59CE8F95-3F86-41A3-ADBF-B0B7AE597A55\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110905:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B5B5152-0931-4230-81DE-06AD51D3F924\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110906:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B4AA069-8466-41A5-A820-F49034F61A05\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110907:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F4CD559-CF31-46F9-80A0-935FF64C8835\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110919:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"896DA708-55C5-41CF-B86A-7A95B5975FB4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110920:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"81C718D6-88E4-46CD-8AD9-9DB2D9F2C7BA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110921:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3F4BFD65-1174-4322-95A1-DBB531F99D49\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20110930:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B91F422-4B7F-489E-985A-8FD8BC328A0B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20111003:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F91424A-272F-4541-A7E0-4296206B66AA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20111005:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B7022FF8-00D6-46F2-BA2A-A43EC4BC1107\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20111013:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"605AE465-794F-43A4-AB7F-9A89131EBCDD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20111028:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"085A68DB-C107-4894-9802-487E755936F4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20111102:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD497549-C665-4309-ABB0-6480C537D158\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20111108:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"788FF286-44AC-4BAA-8BBA-5A9E2A913827\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ulli_horlacher:fex:20111115:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"12D95670-B25D-4359-B322-DA9A85F613DE\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams\u0027 Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.\"}, {\"lang\": \"es\", \"value\": \"M\\u00faltiples vulnerabilidades de ejecuci\\u00f3n de secuencias de comandos en sitios cruzados (XSS) en fup en Frams\u0027 Fast File EXchange (F*EX, tambi\\u00e9n conocido como fex) antes de v20111129-2, permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\\u00e9s del par\\u00e1metro (1) to o (2) from.\"}]",
      "id": "CVE-2012-1293",
      "lastModified": "2024-11-21T01:36:47.170",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:N/I:P/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2012-09-25T23:55:01.970",
      "references": "[{\"url\": \"http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://fex.rus.uni-stuttgart.de/fex.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"http://osvdb.org/79420\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/47971\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.debian.org/security/2012/dsa-2414\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/02/20/1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/02/20/8\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/02/23/2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/52085\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://fex.rus.uni-stuttgart.de/fex.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://osvdb.org/79420\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/47971\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.debian.org/security/2012/dsa-2414\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/02/20/1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/02/20/8\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/02/23/2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/52085\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-79\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2012-1293\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2012-09-25T23:55:01.970\",\"lastModified\":\"2026-04-29T01:13:23.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams\u0027 Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en fup en Frams\u0027 Fast File EXchange (F*EX, tambi\u00e9n conocido como fex) antes de v20111129-2, permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s del par\u00e1metro (1) to o (2) from.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20111129\",\"matchCriteriaId\":\"72C3A3CD-9F1D-42E6-BDDA-C4F174374FE7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110609:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DADCE79F-F50A-4431-A58F-D5F773D76DE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110610:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2AE8C15-046B-4281-A6C9-C84B8413D9ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110614:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF7863E7-E72A-4FDA-9C9B-5C9C97A45E4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110615:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EFFC1CCE-F81C-4B9F-9C68-49A0E2F84C8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110616:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EABE0285-A874-406D-A043-B150A9ABAA8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110621:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9474467C-1F7F-44A8-83C1-BCF8FE2F970D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110622:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DB326FA-5105-43ED-8BF3-F446EA4A08AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110627:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2A48C83-D915-4C93-AFF8-2EF8B18AB4A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110630:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"248ECC97-B408-4414-A270-B447E30AD9C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110701:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A788C3A-A780-4A8C-BB95-0D2C8586166E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110714:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCA354F9-B1A3-4BF1-964D-06F59861D9BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110716:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4ACFDED-A4BF-4441-85F8-015EDF912B01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110722:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93158A38-82B0-4737-9E5C-B817C6DB44E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110726:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF798673-E9C7-4663-A039-21AAB9BF4F2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110727:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F18DC45-687B-4C97-9D26-C0EB9ABB8536\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110730:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0763EA8-8CED-4F93-B924-22B12357A07A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110731:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC0A983A-B8DE-4E40-A92C-AC81BAF6A8FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110803:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0CDCBA0-1BC9-4A4E-8BC4-C8A2F410EEAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110807:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90649682-6B07-4858-987E-B3D8EC407525\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110808:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C950549-BA30-4AF3-8A8C-791EF04296B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110809:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2E84D68-4A4C-4B1B-9D85-D48D166B4C01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110810:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F721923E-1A9E-40D5-AFA9-1367D14A7C28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110811:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"098AC745-43E7-43BC-803C-205FA6A1791C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110813:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54DB36F4-9475-4A18-AC5D-CC236F622410\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110826:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"41CEA8B2-EA87-4B72-9BCE-DA37B77769C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110829:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F2AEEBC-92D1-42B4-BADD-5E77008119D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110830:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4243748-88C8-40A0-917B-A9F33E5D171A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110901:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59CE8F95-3F86-41A3-ADBF-B0B7AE597A55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110905:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B5B5152-0931-4230-81DE-06AD51D3F924\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110906:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B4AA069-8466-41A5-A820-F49034F61A05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110907:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F4CD559-CF31-46F9-80A0-935FF64C8835\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110919:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"896DA708-55C5-41CF-B86A-7A95B5975FB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110920:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81C718D6-88E4-46CD-8AD9-9DB2D9F2C7BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110921:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F4BFD65-1174-4322-95A1-DBB531F99D49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20110930:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B91F422-4B7F-489E-985A-8FD8BC328A0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20111003:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F91424A-272F-4541-A7E0-4296206B66AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20111005:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7022FF8-00D6-46F2-BA2A-A43EC4BC1107\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20111013:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"605AE465-794F-43A4-AB7F-9A89131EBCDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20111028:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"085A68DB-C107-4894-9802-487E755936F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20111102:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD497549-C665-4309-ABB0-6480C537D158\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20111108:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"788FF286-44AC-4BAA-8BBA-5A9E2A913827\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ulli_horlacher:fex:20111115:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12D95670-B25D-4359-B322-DA9A85F613DE\"}]}]}],\"references\":[{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://fex.rus.uni-stuttgart.de/fex.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://osvdb.org/79420\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/47971\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2012/dsa-2414\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/02/20/1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/02/20/8\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/02/23/2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/52085\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://fex.rus.uni-stuttgart.de/fex.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://osvdb.org/79420\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/47971\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2012/dsa-2414\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/02/20/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/02/20/8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/02/23/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/52085\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.