Sql injection

2011-12-1400:55:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.8%

JSON

SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System (ASAS) Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.

CPENameOperatorVersion
authenex_strong_authentication_system_servereq3.1.0.3
authenex_strong_authentication_system_servereq3.1.0.2

CPE	Name	Operator	Version
	authenex_strong_authentication_system_server	eq	3.1.0.3
	authenex_strong_authentication_system_server	eq	3.1.0.2

References

www.foregroundsecurity.com/security-advisories/101-authenex-a-keyasas-web-management-control-3102-time-based-sql-injection

support.authenex.com/index.php?/Knowledgebase/Article/View/124/0/asas3103update2

www.exploit-db.com/exploits/18117