CVE ID:	CVE-2012-1293
Description:	Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1293 BugTraq ID: 52085 http://www.securityfocus.com/bid/52085 Bugtraq: 20120220 Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-02/0112.html Bugtraq: 20120220 Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-02/0109.html Debian Security Information: DSA-2414 (Google Search) http://www.debian.org/security/2012/dsa-2414 http://www.openwall.com/lists/oss-security/2012/02/20/8 http://www.openwall.com/lists/oss-security/2012/02/20/1 http://www.openwall.com/lists/oss-security/2012/02/23/2 http://osvdb.org/79420 http://secunia.com/advisories/47971