Description (CNA)
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10718
- http://securitytracker.com/id?1005681
- http://marc.info/?l=bugtraq&m=103842773205148&w=2
- http://www.securityfocus.com/bid/6265
ADP enrichment
No English description supplied.