Vulnerability in Layton Technology Helpbox

CVE-2012-4975

editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sys_request_id parameter.

EPSS: 0.008 (54.2th percentile) — read the EPSS interpretation.

Affected products

Layton_technology Helpbox — versions 4.4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)