Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1) parent or (2) sortposted parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/18704
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0266
http://www.securityfocus.com/bid/12114