CVE-2010-5026

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5027

Cross-site scripting XSS vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5026

The vulnerability described across sources is a SQL injection in the Scientific project Science Fair In A Box (SFIAB), specifically in winners.php for versions 2.0.6 and 2.2.0. The root cause is unsanitized input in the type parameter, enabling remote attackers to execute arbitrary SQL commands. ...

PT-2011-1962

Name of the Vulnerable Software and Affected Versions Science Fair In A Box SFIAB versions 2.0.6 through 2.2.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the type parameter in...

CVE-2010-5026: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

PT-2011-1961

Name of the Vulnerable Software and Affected Versions Science Fair In A Box SFIAB versions 2.0.6 through 2.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter in the winners.php file. Recommendations For versions 2.0.6 throu...

CVE-2010-5027: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information...