CVE-2012-4971

CVE-2012-4971 describes multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0. The affected components include various ASP pages and parameters such as editrequestenduser.asp (reqclass), editrequestuser.asp (sys_request_id), enduseractions.asp (sys_request_id), enduserreopenrequeststatus...

Layton Helpbox 4.4.0 SQL Injection

Layton Helpbox 4.4.0 Multiple SQL Injection Points by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to multiple SQL injection vulnerabilities. CVE number: CVE-2012-4971 Impact: High Vendor homepage: http://www.laytontechnology.com Vendor notified:...