CVE-2011-4801

CVE-2011-4801 is a critical SQL injection vulnerability found in the akeyActivationLogin.do component of Authenex Web Management Control, affecting Authenex Strong Authentication System (ASAS) Server versions 3.1.0.2 and 3.1.0.3. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands by manipulating the username parameter. With a CVSS score of 7.5, this vulnerability is highly severe, requiring no authentication and having low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. The EPSS score is low, suggesting a low probability of exploitation in the wild, but its FAUCET Risk Score is high at 89/100. While not listed on the CISA KEV catalog and lacking Metasploit or Nuclei modules, exploit code for blind SQL injection is publicly available on ExploitDB (EDB-18117). Despite this, there is no evidence of active exploitation, and community discussion or media coverage for this CVE is minimal.