PT-2012-5696

Name of the Vulnerable Software and Affected Versions Layton Helpbox version 4.4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via various parameters, including reqclass, sys request id, confirm, searchsql, back, status, sys userpwd, sql,...

PT-2012-5699

Name of the Vulnerable Software and Affected Versions Layton Helpbox version 4.4.0 Description The issue allows remote authenticated users to modify arbitrary support-ticket data. This is achieved by altering the sys request id parameter in the editrequestuser.asp page. Recommendations For Layton...

CVE-2012-4975: Undefined Security Weakness

editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sysrequestid parameter...

CVE-2007-5403: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Layton HelpBox 3.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Forename, 2 Surname, 3 Telephone, and 4 Fax fields to writeenduserenduser.asp; the 5 Filter field to statsrequestypereport.asp; and the 6...