CVE-2012-4974

The CVE-2012-4974 entry concerns Layton Helpbox 4.4.0. Affected component: login/session handling via several cookies (loggedinenduser, loggedinendusername, loggedinuserusergroup, loggedinuser, loggedinusername). Root cause: an attacker with authenticated access can modify these cookies to alter ...

Layton Helpbox 4.4.0 Login Bypass

Layton Helpbox 4.4.0 Login Bypass Vulnerability by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to a login bypass vulnerability. CVE number: CVE-2012-4974 Impact: High Vendor homepage: http://www.laytontechnology.com Vendor notified: 10/09/2012 Vendor...