Vulnerabilities > Nicholas Berry

DATE CVE VULNERABILITY TITLE RISK
2011-11-01 CVE-2010-4979 SQL Injection vulnerability in Nicholas Berry Candid
SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the image_id parameter.
network
low complexity
nicholas-berry CWE-89
7.5
2011-11-01 CVE-2010-4978 Cross-Site Scripting vulnerability in Nicholas Berry Candid
Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web script or HTML via the image_id parameter.
4.3