CVE-2010-4979

CANDID is reported vulnerable to an SQL Injection in image/view.php via the image_id parameter (CVE-2010-4979). The OpenVAS note corroborates that CANDID is prone to SQLi (and XSS in related checks). The CVSS base score listed is 7.5 (HIGH) with network access, low attack complexity, and no authe...