CVE-2006-2748

SQL injection vulnerability in the domysqlquery function in core.php for Open Searchable Image Catalogue OSIC before 0.7.0.1 allows remote attackers to inject arbitrary SQL commands via multiple vectors, as demonstrated by the 1 type parameter in adminfunctions.php and the 2 catalogueid parameter...

Open Searchable Image Catalogue: XSS and SQL Injection Vulnerabilities

=========================================================== Open Searchable Image Catalogue: XSS and SQL Injection Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0605-001, May 30, 2006...