Unrated severityNVD Advisory· Published Jun 1, 2006· Updated Jun 16, 2026
CVE-2006-2751
CVE-2006-2751
Description
Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary web scripts or HTML via the item_list parameter in search.php.
Affected products
2- cpe:2.3:a:open_searchable_image_catalogue:open_searchable_image_catalogue:*:*:*:*:*:*:*:*Range: <=0.7.0.0
Patches
Vulnerability mechanics
References
6- www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txtnvdVendor Advisory
- securityreason.com/securityalert/1014nvd
- sourceforge.net/forum/forum.phpnvd
- svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.phpnvd
- www.securityfocus.com/archive/1/435380/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26965nvd
News mentions
0No linked articles in our index yet.