Description
selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sys_asset_id request, which is not properly handled during construction of an error page.
Unscored
CVE-2012-4976
EUVD-2012-4900GHSA-cgf3-cx8v-m6p5
selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sys_asset_id request…
Published Dec 12, 2012 · Updated Sep 16, 2024 · Assigned by mitre