CVE-2004-1630 Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openwfe work flow engine | = 1.4 | No fix listed |
| openwfe work flow engine | = 1.4.1 | No fix listed |
| openwfe work flow engine | = 1.4.2 | No fix listed |
| openwfe work flow engine | = 1.4.3 | No fix listed |
| openwfe work flow engine | = 1.4.4 | No fix listed |
| openwfe work flow engine | = 1.4.5 | No fix listed |
References
- 20041024 Two Vulnerabilities in OpenWFE Web Client mailing-list
- 12970 exploit patch third-party-advisory vendor-advisory
- 11514 exploit patch vdb-entry vendor-advisory
- openwfe-login-form-xss(17853) vdb-entry