{ "schema_version": "1.4.0", "id": "GHSA-9x4v-pj6r-qf85", "modified": "2022-05-01T07:02:05Z", "published": "2022-05-01T07:02:05Z", "aliases": [ "CVE-2006-2751" ], "details": "Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary web scripts or HTML via the item_list parameter in search.php.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2751" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26965" }, { "type": "WEB", "url": "http://securityreason.com/securityalert/1014" }, { "type": "WEB", "url": "http://sourceforge.net/forum/forum.php?forum_id=576483" }, { "type": "WEB", "url": "http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477" }, { "type": "WEB", "url": "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/435380/100/0/threaded" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2006-06-01T10:02:00Z" } }