Vulnerabilities

TI-2002-01786 CVE-2002-1867 · GHSA-gpmx-wmq7-fj5h

The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control…

LOW 36

The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1) admin/setup.cgi, which allows remote attackers to create an administrative account, or (2) admin/nph-build.cgi, which all…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01532 Published 2005-06-28 No fix listed

TI-2002-01720 CVE-2002-1801 · GHSA-v66x-wqh5-mwx3

ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via…

LOW 26

ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web root in the resulting error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01763 Published 2005-06-28 No fix listed

TI-2002-01260 CVE-2002-1334 · GHSA-w53h-qr38-96j7

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows…

LOW 38

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cg…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04691 Published 2002-12-03 No fix listed

Vulnerabilities

Filters

The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control…

ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via…

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows…