Vulnerability Database

296,122

Total vulnerabilities in the database

CVE-2002-1334

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.

  • Published: Dec 11, 2002
  • Updated: Apr 13, 2023
  • CVE: CVE-2002-1334
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
bizdesign / imagefolio 2.26 2.26.x
bizdesign / imagefolio 2.24 2.24.x
bizdesign / imagefolio 2.27 2.27.x
bizdesign / imagefolio 2.23 2.23.x
bizdesign / imagefolio 3.0.1 3.0.1.x