EUVD-2002-1846

Malware in sbrugna...

EUVD-2002-1318

Malware in sbrugna...

CVE-2002-1867

The CVE-2002-1867 entry concerns BizDesign ImageFolio versions 2.23–2.26 where default configuration fails to restrict access to admin/setup.cgi and admin/nph-build.cgi. This allows remote attackers to (1) create an administrative account and (2) trigger a denial of service (CPU consumption). The...

CVE-2002-1867

The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to 1 admin/setup.cgi, which allows remote attackers to create an administrative account, or 2 admin/nph-build.cgi, which allows remote attackers to cause a denial of service CPU consumption...

CVE-2002-1334

Cross-site scripting XSS vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via 1 the direct parameter in imageFolio.cgi, or 2 nph-build.cgi...

CVE-2002-1334

Technical details about CVE-2002-1334 are not publicly available in the provided documents. No vendor, product version, vulnerable component, or remediation is specified here. Monitor for updates in the connected sources.

CVE-2002-1334

Cross-site scripting XSS vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via 1 the direct parameter in imageFolio.cgi, or 2 nph-build.cgi...

Cross-site Scripting Vulnerability in ImageFolio Image Gallery Software

Alert URL http://www.securitytracker.com/alerts/2002/Nov/1005681.html Date November 27, 2002 Title Cross-site Scripting Vulnerability in ImageFolio Image Gallery Software Vendor BizDesign Product ImageFolio URL http://www.imagefolio.com/ Description An input validation vulnerability exists in...