Unrated severityNVD Advisory· Published Jun 18, 2014· Updated Jun 17, 2026

CVE-2014-3876

Description

Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc.

Affected products

Ulli Horlacher/Fex
cpe:2.3:a:ulli_horlacher:fex:*:*:*:*:*:*:*:*
Range: <=20140313
Ulli Horlacher/F*EX (aka fex)llm-create
Range: <20140530

Patches

Vulnerability mechanics

References

fex.rus.uni-stuttgart.de/fex.htmlnvdPatch
packetstormsecurity.com/files/126906/F-EX-20140313-1-HTTP-Response-Splitting-Cross-Site-Scripting.htmlnvdExploit
www.lsexperts.de/advisories/lse-2014-05-22.txtnvdExploit

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000