Vulnerabilities

TI-2010-04750 CVE-2010-5027 · GHSA-wrm2-xcg5-7pj9

Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB)…

LOW 24

Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01776 Published 2011-11-02 No fix listed CWE-79

TI-2010-04749 CVE-2010-5026 · GHSA-mgrh-wv2m-g4w2

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and…

LOW 33

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01492 Published 2011-11-02 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB)…

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and…