| CVE-2012-0869 | | 0.04 | — | 0.17 | | Sep 25, 2012 | Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter. |
| CVE-2014-3877 | | 0.00 | — | 0.00 | | Jun 18, 2014 | Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup. |
| CVE-2014-3876 | | 0.00 | — | 0.00 | | Jun 18, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc. |
| CVE-2012-1293 | | 0.00 | — | 0.01 | | Sep 25, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters. |
| CVE-2011-1409 | | 0.00 | — | 0.01 | | Jun 24, 2011 | Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID. |
