CVE-2006-5150
SQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows remote attackers with report privileges to execute arbitrary SQL commands via unspecified vectors.
Date published : 2006-10-02
http://www.securityfocus.com/bid/20301
http://sourceforge.net/project/shownotes.php?release_id=451780