CitrusDB suffers from SQL injection vulnerabilities in version 0.3.6.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36182/rt-sa-2005-003.txt
Source: https://packetstormsecurity.com/files/36182/rt-sa-2005-003.txt.html