The ‘Additional Images’ Module of OScommerce is susceptible to a SQL injection attack.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40479/oscommerceSQL.txt
Source: https://packetstormsecurity.com/files/40479/oscommerceSQL.txt.html