CVE-2007-5402

Multiple SQL injection vulnerabilities in Layton HelpBox 3.7.1 allow 1 remote attackers to execute arbitrary SQL commands via the sysrequestid parameter to editrequestenduser.asp; and allow remote authenticated users to execute arbitrary SQL commands via 2 the oldpassword parameter to...

CVE-2007-5403

Multiple cross-site scripting XSS vulnerabilities in Layton HelpBox 3.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Forename, 2 Surname, 3 Telephone, and 4 Fax fields to writeenduserenduser.asp; the 5 Filter field to statsrequestypereport.asp; and the 6...