Design/Logic Flaw

selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sysassetid request, which is not properly handled during construction of an error page...

CVE-2012-4976: Exposure of Sensitive Information to an Unauthorized Actor

selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sysassetid request, which is not properly handled during construction of an error page...

PT-2012-5700

Name of the Vulnerable Software and Affected Versions Layton Helpbox version 4.4.0 Description The issue allows remote attackers to discover ODBC database credentials. This is possible because the selectawasset.asp page in Layton Helpbox does not properly handle an element=sys asset id request...