CVE-2011-4801: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System ASAS Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

PT-2011-5107

Name of the Vulnerable Software and Affected Versions Authenex Strong Authentication System ASAS Server versions 3.1.0.2 through 3.1.0.3 Description The issue allows remote attackers to execute arbitrary SQL commands via the username parameter in the akeyActivationLogin.do endpoint. Recommendatio...