CVE-2010-5026

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5026

The vulnerability described across sources is a SQL injection in the Scientific project Science Fair In A Box (SFIAB), specifically in winners.php for versions 2.0.6 and 2.2.0. The root cause is unsanitized input in the type parameter, enabling remote attackers to execute arbitrary SQL commands. ...

CVE-2010-5026

creationtimestamp| type| source ---|---|--- 2010-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13801...