Science Fair IN A Box vulnerabilities | LiveThreat CVE Feed

Product

Science Fair IN A Box

by Sfiab · last CVE Nov 2, 2011

CVEs

On KEV

–

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 0Low 0

Severity

Exploitation

Watch

Add Science Fair IN A Box to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2010-5027	–	2%	Nov 2	Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 2.0.6; 2.2.0
CVE-2010-5026	–	1%	Nov 2	SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter Affected: 2.0.6; 2.2.0