PT-2026-113686

The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed payment corresponds to the order it marks paid, allowing unauthenticated attackers ...

Authenex A-Key/ASAS Web Management Control 3.1.0.2 (latest) - Time-based SQL Injection

No description provided by source. ============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-002 - Original release date: September 21, 2011 - Discovered by: Jose Carlos de Arriba - Senior Security Analyst at Foreground Security - Contact: jcarriba a...

CVE-2011-4801

The CVE-2011-4801 issue affects Authenex ASAS Server 3.1.0.2 and 3.1.0.3, where an SQL injection in akeyActivationLogin.do via the username parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is evidenced in multiple sources (NVD, Red Hat advisory, OpenVAS entri...

PT-2011-5107

Name of the Vulnerable Software and Affected Versions Authenex Strong Authentication System ASAS Server versions 3.1.0.2 through 3.1.0.3 Description The issue allows remote attackers to execute arbitrary SQL commands via the username parameter in the akeyActivationLogin.do endpoint. Recommendatio...

CVE-2011-4801: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System ASAS Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Authenex A-KeyASAS Web Management Control 3.1.0.2 - Blind SQL Injection

Authenex A-KeyASAS Web Management Control 3.1.0.2 - Blind SQL Injection ============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-002 - Original release date: September 21, 2011 - Discovered by: Jose Carlos de Arriba - Senior Security Analyst at...

Authenex A-Key/ASAS Web Management Control 3.1.0.2 - Blind SQL Injection

============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-002 - Original release date: September 21, 2011 - Discovered by: Jose Carlos de Arriba - Senior Security Analyst at Foreground Security - Contact: jcarriba at foregroundsecurity dot com, dade ...

ASAS Server End User Self Service (EUSS) SQL Injection Vulnerability

The host is running Authenex ASAS and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodauthenexasasserversqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ ASAS Server End User Self Service EUSS SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

ASAS Server End User Self Service (EUSS) SQL Injection Vulnerability

Authenex ASAS is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...