Description
editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sys_request_id parameter.
Unscored
CVE-2012-4975
EUVD-2012-4899GHSA-7p6f-596p-xrcj
editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sys_re…
Published Dec 12, 2012 · Updated Aug 6, 2024 · Assigned by mitre