CVE-2011-4801 SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System (ASAS) Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute a...
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System (ASAS) Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| authenex strong authentication system server | = 3.1.0.2 | No fix listed |
| authenex strong authentication system server | = 3.1.0.3 | No fix listed |
References
- 18117 exploit
- www.foregroundsecurity.com exploit
- support.authenex.com patch vendor-advisory