Approved changes feed: RSS · Atom

cpe:2.3:a:bizdesign:imagefolio:2.27:*:*:*:*:*:*:*

part: a version: 2.27 update: *

VendorBizdesign (bdd41701-828d-5137-95f9-a54ebe004e13)
ProductImagefolio (92cc8053-ed9c-5c06-bea0-ee13ee6e50d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-1801 vulnerable 2026-06-08 04:47:18.192362 Details available
ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web root in the resulting error message.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-16T22:35:12.154Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1334 vulnerable 2026-06-08 04:46:23.451930 Details available
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.
Published: 2002-12-03T05:00:00.000Z
Updated: 2024-08-08T03:19:28.641Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.