Lucene search

K

Candid Security Vulnerabilities

cve
cve

CVE-2010-4978

Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web script or HTML via the image_id parameter.

5.9AI Score

0.002EPSS

2011-11-01 10:55 PM
30
cve
cve

CVE-2010-4979

SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the image_id parameter.

8.7AI Score

0.001EPSS

2011-11-01 10:55 PM
24