CVE-2006-2751
Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary web scripts or HTML via the item_list parameter in search.php.
Date published : 2006-06-01
http://www.securityfocus.com/archive/1/435380/100/0/threaded