Vulnerability Details CVE-2011-4801
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System (ASAS) Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 84.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://www.exploit-db.com/exploits/18117
- http://www.foregroundsecurity.com/security-advisories/101-authenex-a-keyasas-web-management-control-3102-time-based-sql-injection
- https://support.authenex.com/index.php?/Knowledgebase/Article/View/124/0/asas3103update2
- http://www.exploit-db.com/exploits/18117
- http://www.foregroundsecurity.com/security-advisories/101-authenex-a-keyasas-web-management-control-3102-time-based-sql-injection
- https://support.authenex.com/index.php?/Knowledgebase/Article/View/124/0/asas3103update2
Products affected by CVE-2011-4801
-
cpe:2.3:a:authenex:authenex_strong_authentication_system_server:3.1.0.2
-
cpe:2.3:a:authenex:authenex_strong_authentication_system_server:3.1.0.3