EIP-2026-105608

The entry describes a SQL injection vulnerability in Pixie due to improper input sanitization in the 'lang' parameter of rss_promo.php. It references a SecurityFocus BID but lacks exploit code or technical depth.