Design/Logic Flaw

AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml...