7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.9%
selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sys_asset_id request, which is not properly handled during construction of an error page.