CVEvulnerability
CVE-2012-4975
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-12-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sys_request_id parameter.
Affected configurations
• layton technology helpbox 4.4.0
Related
Weakness · not in database (1)
References
- http://www.reactionpenetrationtesting.co.uk/helpbox-auth-bypass.html www.reactionpenetrationtesting.co.uk
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79644 exchange.xforce.ibmcloud.com
- http://www.reactionpenetrationtesting.co.uk/helpbox-auth-bypass.html www.reactionpenetrationtesting.co.uk
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79644 exchange.xforce.ibmcloud.com