Ansel

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Ansel records in CISA KEV

No Ansel vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Ansel · all components

TI-2004-02138 CVE-2004-2266 · GHSA-r5px-246v-9fm3

LOW 36

SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01333 Published 2005-07-19 No fix listed

TI-2004-02075 CVE-2004-2203 · GHSA-6xr3-78rc-hq5m

LOW 36

Ansel 1.2 through 2.0 uses insecure default permissions, which allows remote attackers to gain access to web readable directories.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01549 Published 2005-07-10 No fix listed