[SA27699] Layton HelpBox Multiple Vulnerabilities

---------------------------------------------------------------------- A new version 0.9.0.0 - Release Candidate 1 of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today:...

CVE-2004-2551

Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via 1 the syscommentid parameter in editcommentenduser.asp, 2 the syssuspendid parameter in editsuspensionuser.asp, 3 the table parameter in exportdata.asp, 4 the sysanalgroup...

CVE-2004-2551

CVE-2004-2551 describes multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1. The issue allows remote attackers to inject arbitrary SQL commands through a set of input parameters across various scripts (editcommentenduser.asp, editsuspensionuser.asp, export_data.asp, manageanalgrouppref...

CVE-2004-2551

Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via 1 the syscommentid parameter in editcommentenduser.asp, 2 the syssuspendid parameter in editsuspensionuser.asp, 3 the table parameter in exportdata.asp, 4 the sysanalgroup...

[NT] HelpBox Multiple SQL Injection Vulnerabilties

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...