SQL Injection in Authenex Strong Authentication System Server
CVE-2011-4801
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System (ASAS) Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Vulnerability class: SQL Injection
EPSS: 0.012 (66.0th percentile) — read the EPSS interpretation.
Affected products
- Authenex Authenex_strong_authentication_system_server — versions 3.1.0.2, 3.1.0.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)