CVE-2002-1334: Bizdesign Imagefolio

Medium severity, CVSS 6.8. EPSS: 4.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.

Affected products

• Bizdesign Imagefolio: version 2.23 only; version 2.24 only; version 2.26 only; version 2.27 only; version 3.0.1 only

Published 2002-12-11. Last modified 2026-06-16.