CVE-2004-2267

The CVE-2004-2267 entry describes a Cross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier. The issue allows remote attackers to inject arbitrary HTML or web script via the album name. Affected product/versions: Ansel 2.1 and earlier. Root cause: unsanitized album name input enabling s...