CVE-2002-1334

BizDesign ImageFolio <= 3.01 - Cross-Site Scripting via direct or nph-build.cgi Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2002-1334. PoCs published by SecurityTracker.com.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in ImageFolio's CGI scripts due to insufficient input sanitization. The provided URL injects a JavaScript alert, proving arbitrary script execution in the context of the vulnerable site.

Description

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.

Exploits (2)

exploitdb WORKING POC VERIFIED
by SecurityTracker.com · textwebappscgi
https://www.exploit-db.com/exploits/22051

This exploit demonstrates a cross-site scripting (XSS) vulnerability in ImageFolio's CGI scripts due to insufficient input sanitization. The provided URL injects a JavaScript alert, proving arbitrary script execution in the context of the vulnerable site.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: ImageFolio (version not specified)
No auth needed
Prerequisites: Victim must visit a malicious link
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by SecurityTracker.com · textwebappscgi
https://www.exploit-db.com/exploits/22050

The provided text describes a cross-site scripting (XSS) vulnerability in ImageFolio's CGI scripts due to insufficient input sanitization. An attacker can craft a malicious URL to execute arbitrary JavaScript in the context of a victim's browser session.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: ImageFolio (version not specified)
No auth needed
Prerequisites: Victim must click on a malicious link
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10718
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1005681
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103842773205148&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6265

Scores

EPSS 0.0469
EPSS Percentile 90.9%

Details

Status published
Products (5)
bizdesign/imagefolio 2.23
bizdesign/imagefolio 2.24
bizdesign/imagefolio 2.26
bizdesign/imagefolio 2.27
bizdesign/imagefolio 3.0.1
Published Dec 11, 2002
Tracked Since Feb 18, 2026