selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an elementsys_asset_id request, which is not properly handled during construction of an error page.
Publication date: Wed, 12 Dec 2012 17:38:00 +0000