layton technology

Top products

The 10 most recently published vulnerabilities affecting layton technology.

• CVE-2012-4975editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sys_request_id parameter.4.0Dec 12, 2012
• CVE-2012-4976selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sys_asset_id request, which is not properly handled during construction of an ...5.0Dec 12, 2012
• CVE-2012-4972Multiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sys_solution_id, (2) sys_requesttype_id, (3) sy...4.3Dec 12, 2012
• CVE-2012-4971Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) reqclass parameter to editrequestenduser.asp; the (2) sys_request...7.5Dec 12, 2012
• CVE-2012-4977Layton Helpbox 4.4.0 allows remote attackers to discover cleartext credentials for the login page by sniffing the network.5.0Dec 12, 2012
• CVE-2007-5404Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.5.0Jan 9, 2008
• CVE-2007-5402Multiple SQL injection vulnerabilities in Layton HelpBox 3.7.1 allow (1) remote attackers to execute arbitrary SQL commands via the sys_request_id parameter to editrequestenduser.asp; and allow rem...6.5Jan 9, 2008
• CVE-2007-5401Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking fil...6.5Jan 9, 2008
• CVE-2007-5403Multiple cross-site scripting (XSS) vulnerabilities in Layton HelpBox 3.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Forename, (2) Surname, (3) Telephone,...3.5Jan 9, 2008
• CVE-2004-2551Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the sys_comment_id parameter in editcommentenduser.asp, (2) the sys_s...7.5Nov 21, 2005