{"id":"CVE-2002-1334","aliases":["EUVD-2002-1318","GHSA-w53h-qr38-96j7"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote...","description":"Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04691,"percentile":0.9185,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-12-03T05:00:00Z","modified":"2026-06-16T21:59:07Z","exploits":[{"source":"exploitdb","id":"EDB-22050","title":"BizDesign ImageFolio 2.x/3.0.1 - 'imageFolio.cgi?direct' Cross-Site Scripting","type":"webapps","platform":"cgi","date":"2002-11-27","verified":true,"url":"https://www.exploit-db.com/exploits/22050"},{"source":"exploitdb","id":"EDB-22051","title":"BizDesign ImageFolio 2.x/3.0.1 - 'nph-build.cgi' Cross-Site Scripting","type":"webapps","platform":"cgi","date":"2002-11-27","verified":true,"url":"https://www.exploit-db.com/exploits/22051"}],"products":[{"vendor":"bizdesign","product":"imagefolio"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10718","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securitytracker.com/id?1005681","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=103842773205148\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/6265","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1334"},{"url":"https://github.com/advisories/GHSA-w53h-qr38-96j7"}],"sources":{"cve":[{"id":"CVE-2002-1334","description":"Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.","status":"published","published":"2002-12-03T05:00:00Z","modified":"2024-08-08T03:19:28.641Z","updated_at":"2026-11-02T14:33:54.641433Z"}],"euvd":[{"id":"EUVD-2002-1318","description":"Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.","status":"published","published":"2002-12-03T05:00:00Z","modified":"2024-08-08T03:19:28Z","updated_at":"2026-11-03T01:14:56.771794Z"}],"ghsa":[{"id":"GHSA-w53h-qr38-96j7","title":"Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote...","description":"Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.","status":"published","published":"2022-04-30T18:20:57Z","modified":"2023-01-30T05:06:25Z","updated_at":"2026-11-02T14:47:29.586351Z"}],"nvd":[{"id":"CVE-2002-1334","description":"Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.","status":"published","published":"2002-12-11T05:00:00Z","modified":"2026-06-16T21:59:07.383Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:43.239725Z"}]}}