CVE-2012-4977

Description

References

• reactionpenetrationtesting.co.uk/helpbox-cleartext-login.html

Altre vulnerabilità di helpbox

• CVE-2012-4976MEDIO 5.0selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sys_asset_id request,…
• CVE-2012-4975MEDIO 4.0editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sys_req…
• CVE-2012-4972MEDIO 4.3Multiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to inject arbitrary web script or HTML vi…
• CVE-2012-4971ALTO 7.5Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) reqclass…
• CVE-2007-5404MEDIO 5.0Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows r…