CVE:CVE-2012-1293
CNNVD:CNNVD-201202-382
F*EX 20111129-2之前版本中存在多个跨站脚本漏洞，这些漏洞源于对用户提供的数据未经充分过滤。攻击者可利用这些漏洞在受影响服务器上执行任意脚本代码，盗取基于cookie的认证证书，也可能执行其他的攻击。
solution:Upgrade ulli_horlacher fex to a higher version than 20111129,20110609,20110610,20110614,20110615,20110616,20110621,20110622,20110627,20110630,20110701,20110714,20110716,20110722,20110726,20110727,20110730,20110731,20110803,20110807,20110808,20110809,20110810,20110811,20110813,20110826,20110829,20110830,20110901,20110905,20110906,20110907,20110919,20110920,20110921,20110930,20111003,20111005,20111013,20111028,20111102,20111108,20111115,and avoid the version (,20111129],20110609,20110610,20110614,20110615,20110616,20110621,20110622,20110627,20110630,20110701,20110714,20110716,20110722,20110726,20110727,20110730,20110731,20110803,20110807,20110808,20110809,20110810,20110811,20110813,20110826,20110829,20110830,20110901,20110905,20110906,20110907,20110919,20110920,20110921,20110930,20111003,20111005,20111013,20111028,20111102,20111108,20111115