CVE-2002-1334

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:bizdesign:imagefolio:2.23:*:*:*:*:*:*:*
cpe:2.3:a:bizdesign:imagefolio:2.24:*:*:*:*:*:*:*
cpe:2.3:a:bizdesign:imagefolio:2.26:*:*:*:*:*:*:*
cpe:2.3:a:bizdesign:imagefolio:2.27:*:*:*:*:*:*:*
cpe:2.3:a:bizdesign:imagefolio:3.0.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2002-12-11 05:00

Updated : 2024-02-04 16:31


NVD link : CVE-2002-1334

Mitre link : CVE-2002-1334

CVE.ORG link : CVE-2002-1334


JSON object : View

Products Affected

bizdesign

  • imagefolio