Back

CVE-2004-2266

SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image parameter.

Published: Dec 31, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (7)

Vendor Product Version
ansel ansel 1.0
ansel ansel 1.1
ansel ansel 1.2
ansel ansel 1.3
ansel ansel 1.4
ansel ansel 2.0
ansel ansel 2.1

GitHub Security Advisory GHSA-r5px-246v-9fm3

SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.33%

Top 31% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub