VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 11, 2002· Updated Apr 16, 2026

CVE-2002-1334

CVE-2002-1334

Description

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.

Affected products

5
  • Bizdesign/Imagefolio5 versions
    cpe:2.3:a:bizdesign:imagefolio:2.23:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:bizdesign:imagefolio:2.23:*:*:*:*:*:*:*
    • cpe:2.3:a:bizdesign:imagefolio:2.24:*:*:*:*:*:*:*
    • cpe:2.3:a:bizdesign:imagefolio:2.26:*:*:*:*:*:*:*
    • cpe:2.3:a:bizdesign:imagefolio:2.27:*:*:*:*:*:*:*
    • cpe:2.3:a:bizdesign:imagefolio:3.0.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.