CVE-2006-2748

The CVE-2006-2748 entry concerns Open Searchable Image Catalogue (OSIC) prior to version 0.7.0.1. The vulnerability is a SQL injection in the do_mysql_query function within core.php, allowing remote attackers to inject arbitrary SQL via multiple vectors. Documented vectors include (1) the type pa...