2 matches found
Design/Logic Flaw
selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sysassetid request, which is not properly handled during construction of an error page...
5CVSS7.2AI score0.01186EPSS
SaveExploits1References1Affected Software1
CVE-2012-4976: Exposure of Sensitive Information to an Unauthorized Actor
selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sysassetid request, which is not properly handled during construction of an error page...
5CVSS5.8AI score0.01186EPSS
SaveExploits1References2
20