Science Fair In A Box 'winners.php' Input Validation Vulnerability

Bugtraq ID:	40743
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 09 2010 12:00AM
Updated:	Jun 23 2010 10:28AM
Credit:	L0rd CrusAd3r
Vulnerable:	Lightbox Technologies Science Fair In A Box 2.0.6
Not Vulnerable:

Science Fair In A Box 'winners.php' Input Validation Vulnerability

Science Fair In A Box is prone to an input validation vulnerability that may allow attackers to perform cross-site scripting and SQL-injection attacks because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, control how the site is rendered to the user, or exploit latent vulnerabilities in the underlying database; other attacks are also possible.
.
Science Fair In A Box 2.0.6 is vulnerable; other versions may also be affected.

Science Fair In A Box 'winners.php' Input Validation Vulnerability

Attackers can use a browser to exploit this issue.

The following example URIs are available:
http://www.example.com/winners.php?year=2008&type=Special'
http://www.example.com/winners.php?year=2008&type=Special [xss]

Science Fair In A Box 'winners.php' Input Validation Vulnerability

Solution:
Updates are available. Please see the references for more information.

Science Fair In A Box 'winners.php' Input Validation Vulnerability

References:

• [sfiab-commits] [svn] commit: r2174 - /trunk/winners.php (Lightbox Technologies)
  
• Science Fair In A Box Homepage (Lightbox Technologies)