製品・ソフトウェアに関する情報

JVN脆弱性詳細

Frams' Fast File EXchange の fup におけるクロスサイトスクリプティングの脆弱性

Title	Frams' Fast File EXchange の fup におけるクロスサイトスクリプティングの脆弱性
Summary	Frams' Fast File EXchange (F*EX) の fup には、クロスサイトスクリプティングの脆弱性が存在します。
Possible impacts	第三者により、id パラメータを介して、任意の Web スクリプトまたは HTML を挿入される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 15, 2011, midnight
Registration Date	Sept. 27, 2012, 4:15 p.m.
Last Update	Sept. 27, 2012, 4:15 p.m.

CVSS2.0 : 警告
Score	4.3
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected System

Ulli Horlacher

Frams' Fast File EXchange 20120215 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-0869	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0869
National Vulnerability Database (NVD)
2	CVE-2012-0869	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0869

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-79	https://jvndb.jvn.jp/ja/cwe/CWE-79.html

ベンダー情報

No	Name	URL
Debian Security Advisory
1	DSA-2414	http://www.debian.org/security/2012/dsa-2414
Ulli Horlacher
2	F*EX download	http://fex.rus.uni-stuttgart.de/fex.html

Change Log

No	Changed Details	Date of change
0	[2012年09月27日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2012-0869

Summary	Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Publication Date	Sept. 26, 2012, 8:55 a.m.
Registration Date	Jan. 28, 2021, 2:54 p.m.
Last Update	Nov. 21, 2024, 10:35 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:ulli_horlacher:fex:20110830:::::::*
cpe:2.3:a:ulli_horlacher:fex::::::::		20120207
cpe:2.3:a:ulli_horlacher:fex:20110621:::::::*
cpe:2.3:a:ulli_horlacher:fex:2011205:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110610:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111115:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110622:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110616:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110807:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110811:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110907:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120204:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120202:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120102:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110727:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110701:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110813:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110901:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110808:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110716:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120117:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111003:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111129:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111231:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120203:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110609:::::::*
cpe:2.3:a:ulli_horlacher:fex:20100208:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110919:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111108:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110810:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111013:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110906:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110921:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110614:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110930:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110615:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111028:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110722:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111102:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110630:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110905:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110730:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120125:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110920:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110826:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111230:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110803:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110809:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110829:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111005:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120201:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110726:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110731:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110627:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110714:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120106:::::::*

Related information, measures and tools

No	URL	タグ
1	http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html
2	http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html
3	http://fex.rus.uni-stuttgart.de/fex.html	Patch
4	http://osvdb.org/79420
5	http://secunia.com/advisories/47971	Vendor Advisory
6	http://www.debian.org/security/2012/dsa-2414
7	http://www.openwall.com/lists/oss-security/2012/02/20/1
8	http://www.openwall.com/lists/oss-security/2012/02/20/8
9	http://www.openwall.com/lists/oss-security/2012/02/23/2
10	http://www.securityfocus.com/bid/52085
11	https://exchange.xforce.ibmcloud.com/vulnerabilities/78966
12	http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html
13	https://exchange.xforce.ibmcloud.com/vulnerabilities/78966
14	http://www.securityfocus.com/bid/52085
15	http://www.openwall.com/lists/oss-security/2012/02/23/2
16	http://www.openwall.com/lists/oss-security/2012/02/20/8
17	http://www.openwall.com/lists/oss-security/2012/02/20/1
18	http://www.debian.org/security/2012/dsa-2414
19	http://secunia.com/advisories/47971	Vendor Advisory
20	http://osvdb.org/79420
21	http://fex.rus.uni-stuttgart.de/fex.html	Patch
22	http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-79	クロスサイト・スクリプティング（XSS）	https://cwe.mitre.org/data/definitions/79.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:ulli_horlacher:fex:20110830:::::::*
cpe:2.3:a:ulli_horlacher:fex::::::::		20120207
cpe:2.3:a:ulli_horlacher:fex:20110621:::::::*
cpe:2.3:a:ulli_horlacher:fex:2011205:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110610:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111115:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110622:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110616:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110807:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110811:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110907:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120204:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120202:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120102:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110727:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110701:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110813:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110901:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110808:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110716:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120117:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111003:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111129:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111231:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120203:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110609:::::::*
cpe:2.3:a:ulli_horlacher:fex:20100208:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110919:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111108:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110810:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111013:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110906:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110921:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110614:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110930:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110615:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111028:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110722:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111102:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110630:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110905:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110730:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120125:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110920:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110826:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111230:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110803:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110809:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110829:::::::*
cpe:2.3:a:ulli_horlacher:fex:20111005:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120201:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110726:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110731:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110627:::::::*
cpe:2.3:a:ulli_horlacher:fex:20110714:::::::*
cpe:2.3:a:ulli_horlacher:fex:20120106:::::::*