VULNERABILITY INTELLIGENCE
CVE-2002-1334
CVSS score6.8 MEDIUM
EPSS probability4.69%
CISA KEVNot currently listed
Published2002-12-11
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.