CVE-2012-1293
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX,...
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
Exploit likelihood
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
- Record
CVE-2012-1293- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
- Record
CVE-2012-1293- Updated
- 2026-11-02
EUVDEUVD-2012-1319 No score
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
- Record
EUVD-2012-1319- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gff9-66qm-g2w3 No score
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX,...
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
- Record
GHSA-gff9-66qm-g2w3- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
- Record
CVE-2012-1293- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1293 No score
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
- Record
DEBIAN-CVE-2012-1293- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fexDebian:12 |
before 20120215-1, plus listed versions 20110601-120110608-120110608-220110610-120110610-2 Show 6 moreShow less20110620-120110622-120110726-120110726-1~bpo60+120111129-120111129-2 |
20120215-1 |
fexDebian:13 |
before 20120215-1, plus listed versions 20110601-120110608-120110608-220110610-120110610-2 Show 6 moreShow less20110620-120110622-120110726-120110726-1~bpo60+120111129-120111129-2 |
20120215-1 |
fexDebian:6.0 From an advisory covering 2 CVEs |
before 20100208+debian1-1+squeeze2 | 20100208+debian1-1+squeeze2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1293 is a medium vulnerability (CVSS 4.3) in Ulli Horlacher Fex, published February 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. Fixed in fex 20120215-1.