{
    "id": "CVE-2002-1334",
    "published": "2002-12-11 05:00:00",
    "last_modified": "2026-06-16 21:59:07",
    "cvss_score": "6.8",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
    "cwe": null,
    "description": "Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.",
    "epss_score": "0.04691",
    "epss_percentile": "0.91520",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-03 18:17:03",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "bizdesign",
            "product": "imagefolio"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "22050",
            "title": "BizDesign ImageFolio 2.x/3.0.1 - 'imageFolio.cgi?direct' Cross-Site Scripting",
            "date": "2002-11-27",
            "url": "https://www.exploit-db.com/exploits/22050"
        },
        {
            "source": "exploit-db",
            "ref_id": "22051",
            "title": "BizDesign ImageFolio 2.x/3.0.1 - 'nph-build.cgi' Cross-Site Scripting",
            "date": "2002-11-27",
            "url": "https://www.exploit-db.com/exploits/22051"
        }
    ],
    "refs_list": [
        "http://marc.info/?l=bugtraq&m=103842773205148&w=2",
        "http://securitytracker.com/id?1005681",
        "http://www.securityfocus.com/bid/6265",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/10718",
        "http://marc.info/?l=bugtraq&m=103842773205148&w=2",
        "http://securitytracker.com/id?1005681",
        "http://www.securityfocus.com/bid/6265",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/10718"
    ]
}