CVE-2012-0869
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex)...
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
- Record
CVE-2012-0869- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
- Record
CVE-2012-0869- Updated
- 2026-11-02
EUVDEUVD-2012-0894 No score
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
- Record
EUVD-2012-0894- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qv9r-g2q5-56r8 No score
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex)...
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
- Record
GHSA-qv9r-g2q5-56r8- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
- Record
CVE-2012-0869- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0869 No score
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
- Record
DEBIAN-CVE-2012-0869- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fexDebian:12 |
before 20120215-1, plus listed versions 20110601-120110608-120110608-220110610-120110610-2 Show 6 moreShow less20110620-120110622-120110726-120110726-1~bpo60+120111129-120111129-2 |
20120215-1 |
fexDebian:13 |
before 20120215-1, plus listed versions 20110601-120110608-120110608-220110610-120110610-2 Show 6 moreShow less20110620-120110622-120110726-120110726-1~bpo60+120111129-120111129-2 |
20120215-1 |
fexDebian:6.0 From an advisory covering 2 CVEs |
before 20100208+debian1-1+squeeze2 | 20100208+debian1-1+squeeze2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | F*EX 20100208/20111129-2 - Multiple Cross-Site Scripting Vulnerabilities | 2012-02-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0869 is a medium vulnerability (CVSS 4.3) in Ulli Horlacher Fex, published February 21, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.85%, the 92nd percentile. Fixed in fex 20120215-1.
References
debian.org/security/2012/dsa-2414
exchange.xforce.ibmcloud.com/vulnerabilities/78966
fex.rus.uni-stuttgart.de/fex.html
archives.neohapsis.com/archives/bugtraq/2012-02/0112.html
secunia.com/advisories/47971
openwall.com/lists/oss-security/2012/02/23/2
Show 8 moreShow less
osvdb.org/79420
securityfocus.com/bid/52085
nvd.nist.gov/vuln/detail/CVE-2012-0869
github.com/advisories/GHSA-qv9r-g2q5-56r8
security-tracker.debian.org/tracker/CVE-2012-0869