high7.5Public exploit code
CVE-2011-4801
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System (ASAS) Server 3.1.0.2 and 3.1…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Authenex A-Key/ASAS Web Management Control 3.1.0.2 - Blind SQL Injection2011-11-15 · webapps · multiple
Impact
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System (ASAS) Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Authenex | Authenex Strong Authentication System Server | Versions 3.1.0.2, 3.1.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/18117
- http://www.foregroundsecurity.com/security-advisories/101-authenex-a-keyasas-web-management-control-3102-time-based-sql-injection
- https://support.authenex.com/index.php?/Knowledgebase/Article/View/124/0/asas3103update2
- http://www.exploit-db.com/exploits/18117
- http://www.foregroundsecurity.com/security-advisories/101-authenex-a-keyasas-web-management-control-3102-time-based-sql-injection
- https://support.authenex.com/index.php?/Knowledgebase/Article/View/124/0/asas3103update2