Read the docs
TI-2012-00804 Aliases CVE-2012-0869GHSA-qv9r-g2q5-56r8

Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka…

Priority LOW 28CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Why it matters now

EPSS 0.04852 92nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 75

CPEVersionsRoleVendor
cpe:2.3:a:ulli_horlacher:fex:*:*:*:*:*:*:*:*up to 20120207VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:2011205:*:*:*:*:*:*:*2011205VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20100208:*:*:*:*:*:*:*20100208VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110609:*:*:*:*:*:*:*20110609VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110610:*:*:*:*:*:*:*20110610VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110614:*:*:*:*:*:*:*20110614VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110615:*:*:*:*:*:*:*20110615VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110616:*:*:*:*:*:*:*20110616VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110621:*:*:*:*:*:*:*20110621VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110622:*:*:*:*:*:*:*20110622VulnerableUlli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:*:*:*:*:*:*:*:* Versions up to 20120207 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:2011205:*:*:*:*:*:*:* Versions 2011205 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20100208:*:*:*:*:*:*:* Versions 20100208 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110609:*:*:*:*:*:*:* Versions 20110609 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110610:*:*:*:*:*:*:* Versions 20110610 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110614:*:*:*:*:*:*:* Versions 20110614 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110615:*:*:*:*:*:*:* Versions 20110615 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110616:*:*:*:*:*:*:* Versions 20110616 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110621:*:*:*:*:*:*:* Versions 20110621 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110622:*:*:*:*:*:*:* Versions 20110622 Vulnerable ·Ulli Horlacher
Show 65 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ulli_horlacher:fex:20110627:*:*:*:*:*:*:*20110627VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110630:*:*:*:*:*:*:*20110630VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110701:*:*:*:*:*:*:*20110701VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110714:*:*:*:*:*:*:*20110714VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110716:*:*:*:*:*:*:*20110716VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110722:*:*:*:*:*:*:*20110722VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110726:*:*:*:*:*:*:*20110726VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110727:*:*:*:*:*:*:*20110727VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110730:*:*:*:*:*:*:*20110730VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110731:*:*:*:*:*:*:*20110731VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110803:*:*:*:*:*:*:*20110803VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110807:*:*:*:*:*:*:*20110807VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110808:*:*:*:*:*:*:*20110808VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110809:*:*:*:*:*:*:*20110809VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110810:*:*:*:*:*:*:*20110810VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110811:*:*:*:*:*:*:*20110811VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110813:*:*:*:*:*:*:*20110813VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110826:*:*:*:*:*:*:*20110826VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110829:*:*:*:*:*:*:*20110829VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110830:*:*:*:*:*:*:*20110830VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110901:*:*:*:*:*:*:*20110901VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110905:*:*:*:*:*:*:*20110905VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110906:*:*:*:*:*:*:*20110906VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110907:*:*:*:*:*:*:*20110907VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110919:*:*:*:*:*:*:*20110919VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110920:*:*:*:*:*:*:*20110920VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110921:*:*:*:*:*:*:*20110921VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20110930:*:*:*:*:*:*:*20110930VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111003:*:*:*:*:*:*:*20111003VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111005:*:*:*:*:*:*:*20111005VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111013:*:*:*:*:*:*:*20111013VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111028:*:*:*:*:*:*:*20111028VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111102:*:*:*:*:*:*:*20111102VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111108:*:*:*:*:*:*:*20111108VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111115:*:*:*:*:*:*:*20111115VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111129:*:*:*:*:*:*:*20111129VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111230:*:*:*:*:*:*:*20111230VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20111231:*:*:*:*:*:*:*20111231VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120102:*:*:*:*:*:*:*20120102VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120106:*:*:*:*:*:*:*20120106VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120117:*:*:*:*:*:*:*20120117VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120125:*:*:*:*:*:*:*20120125VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120201:*:*:*:*:*:*:*20120201VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120202:*:*:*:*:*:*:*20120202VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120203:*:*:*:*:*:*:*20120203VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120204:*:*:*:*:*:*:*20120204VulnerableUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120301:*:*:*:*:*:*:*20120301Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120305:*:*:*:*:*:*:*20120305Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120404:*:*:*:*:*:*:*20120404Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120406:*:*:*:*:*:*:*20120406Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120407:*:*:*:*:*:*:*20120407Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120426:*:*:*:*:*:*:*20120426Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120502:*:*:*:*:*:*:*20120502Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120504:*:*:*:*:*:*:*20120504Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120601:*:*:*:*:*:*:*20120601Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120605:*:*:*:*:*:*:*20120605Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120606:*:*:*:*:*:*:*20120606Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120621:*:*:*:*:*:*:*20120621Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120701:*:*:*:*:*:*:*20120701Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120702:*:*:*:*:*:*:*20120702Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120705:*:*:*:*:*:*:*20120705Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120709:*:*:*:*:*:*:*20120709Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120710:*:*:*:*:*:*:*20120710Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120711:*:*:*:*:*:*:*20120711Running onUlli Horlacher
cpe:2.3:a:ulli_horlacher:fex:20120718:*:*:*:*:*:*:*20120718Running onUlli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110627:*:*:*:*:*:*:* Versions 20110627 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110630:*:*:*:*:*:*:* Versions 20110630 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110701:*:*:*:*:*:*:* Versions 20110701 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110714:*:*:*:*:*:*:* Versions 20110714 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110716:*:*:*:*:*:*:* Versions 20110716 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110722:*:*:*:*:*:*:* Versions 20110722 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110726:*:*:*:*:*:*:* Versions 20110726 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110727:*:*:*:*:*:*:* Versions 20110727 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110730:*:*:*:*:*:*:* Versions 20110730 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110731:*:*:*:*:*:*:* Versions 20110731 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110803:*:*:*:*:*:*:* Versions 20110803 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110807:*:*:*:*:*:*:* Versions 20110807 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110808:*:*:*:*:*:*:* Versions 20110808 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110809:*:*:*:*:*:*:* Versions 20110809 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110810:*:*:*:*:*:*:* Versions 20110810 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110811:*:*:*:*:*:*:* Versions 20110811 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110813:*:*:*:*:*:*:* Versions 20110813 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110826:*:*:*:*:*:*:* Versions 20110826 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110829:*:*:*:*:*:*:* Versions 20110829 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110830:*:*:*:*:*:*:* Versions 20110830 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110901:*:*:*:*:*:*:* Versions 20110901 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110905:*:*:*:*:*:*:* Versions 20110905 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110906:*:*:*:*:*:*:* Versions 20110906 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110907:*:*:*:*:*:*:* Versions 20110907 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110919:*:*:*:*:*:*:* Versions 20110919 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110920:*:*:*:*:*:*:* Versions 20110920 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110921:*:*:*:*:*:*:* Versions 20110921 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20110930:*:*:*:*:*:*:* Versions 20110930 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111003:*:*:*:*:*:*:* Versions 20111003 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111005:*:*:*:*:*:*:* Versions 20111005 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111013:*:*:*:*:*:*:* Versions 20111013 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111028:*:*:*:*:*:*:* Versions 20111028 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111102:*:*:*:*:*:*:* Versions 20111102 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111108:*:*:*:*:*:*:* Versions 20111108 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111115:*:*:*:*:*:*:* Versions 20111115 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111129:*:*:*:*:*:*:* Versions 20111129 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111230:*:*:*:*:*:*:* Versions 20111230 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20111231:*:*:*:*:*:*:* Versions 20111231 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120102:*:*:*:*:*:*:* Versions 20120102 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120106:*:*:*:*:*:*:* Versions 20120106 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120117:*:*:*:*:*:*:* Versions 20120117 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120125:*:*:*:*:*:*:* Versions 20120125 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120201:*:*:*:*:*:*:* Versions 20120201 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120202:*:*:*:*:*:*:* Versions 20120202 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120203:*:*:*:*:*:*:* Versions 20120203 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120204:*:*:*:*:*:*:* Versions 20120204 Vulnerable ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120301:*:*:*:*:*:*:* Versions 20120301 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120305:*:*:*:*:*:*:* Versions 20120305 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120404:*:*:*:*:*:*:* Versions 20120404 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120406:*:*:*:*:*:*:* Versions 20120406 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120407:*:*:*:*:*:*:* Versions 20120407 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120426:*:*:*:*:*:*:* Versions 20120426 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120502:*:*:*:*:*:*:* Versions 20120502 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120504:*:*:*:*:*:*:* Versions 20120504 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120601:*:*:*:*:*:*:* Versions 20120601 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120605:*:*:*:*:*:*:* Versions 20120605 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120606:*:*:*:*:*:*:* Versions 20120606 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120621:*:*:*:*:*:*:* Versions 20120621 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120701:*:*:*:*:*:*:* Versions 20120701 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120702:*:*:*:*:*:*:* Versions 20120702 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120705:*:*:*:*:*:*:* Versions 20120705 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120709:*:*:*:*:*:*:* Versions 20120709 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120710:*:*:*:*:*:*:* Versions 20120710 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120711:*:*:*:*:*:*:* Versions 20120711 Running on ·Ulli Horlacher
  • cpe:2.3:a:ulli_horlacher:fex:20120718:*:*:*:*:*:*:* Versions 20120718 Running on ·Ulli Horlacher

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-0869
  2. 2026-10-03 Alias added: GHSA-qv9r-g2q5-56r8

References

  • TI-2014-03149 The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before… CVSS 3.1MEDIUM 6.1
  • TI-2011-01234 Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before… CVSS 2.0MEDIUM 5.0
  • TI-2012-01166 Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange… CVSS 2.0MEDIUM 4.3
  • TI-2014-03151 Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before… CVSS 2.0MEDIUM 4.3
  • TI-2014-03150 Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX… CVSS 2.0MEDIUM 4.3

Sources