tocsin

Debian/fex: unknown

Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Action: Upgrade fex to 20120215-1 or later.

Affected

introducedfixedlast affected
020120215-1-

Fixed versions

20120215-1

Sources

published · modified · JSON