Information disclosure in Layton Technology Helpbox

CVE-2012-4976

selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sys_asset_id request, which is not properly handled during construction of an error page.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.6th percentile) — read the EPSS interpretation.