CVE-2006-6541: Undefined Security Weakness

PHP remote file inclusion vulnerability in signer/final.php in warez distributions of Animated Smiley Generator allows remote attackers to execute arbitrary PHP code via a URL in the smiley parameter. NOTE: the vendor disputes this issue, stating that only Warez versions of Animated Smiley...

PT-2006-7144 · Unknown · Animated Smiley Generator

Name of the Vulnerable Software and Affected Versions: Animated Smiley Generator affected versions not specified Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the smiley parameter. The vendor disputes this issue, stating it only affects War...

asg-rfi.txt

LiderHack.Org & Trtekforum.com script name : Animated Smiley Generator Version : All script sites : http://smileygenerator.us Dork : "Smileygenerator" Risk : High Found By : St@rExT Vulnerable file :final.php Error code : require"$smiley/cmd.php"; Exploit:...

Animated Smiley Generator File Include Vul.

LiderHack.Org & Trtekforum.com script name : Animated Smiley Generator Version : All script sites : http://smileygenerator.us Dork : "Smileygenerator" Risk : High Found By : St@rExT Vulnerable file :final.php Error code : require"$smiley/cmd.php"; Exploit:...

CVE-2006-5952

SQL injection vulnerability in admin/default.asp in ASP Smiley 1.0 allows remote attackers to execute arbitrary SQL commands via the Username field...

CVE-2006-5952: Undefined Security Weakness

SQL injection vulnerability in admin/default.asp in ASP Smiley 1.0 allows remote attackers to execute arbitrary SQL commands via the Username field...

CVE-2006-5952

The CVE-2006-5952 entry documents a SQL injection vulnerability in ASP Smiley 1.0, exploitable via the Username field in admin/default.asp. The underlying issue is an input-validated SQL query construction flaw that allows remote attackers to execute arbitrary SQL commands. Reported impact indica...

ASP Smiley 1.0 (default.asp) Login ByPass SQL Injection Vulnerability

No description provided by source. Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...

ASP Smiley 1.0 (default.asp) Login ByPass SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== ASP Smiley 1.0 default.asp Login ByPass SQL Injection Vulnerability ===================================================================== Title : ASP Smiley v1.0...

ASP Smiley 1.0 - 'default.asp' Authentication Bypass / SQL Injection

Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im not Hacker! milw0rm.com 2006-11-14...

ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection

ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im...

CVE-2006-5238

Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors...

CVE-2006-5237

SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-5237

SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2006-5973 · Unknown · Blue Smiley Organizer

Name of the Vulnerable Software and Affected Versions: Blue Smiley Organizer versions prior to 4.45 Description: The issue concerns an unspecified vulnerability in the file upload module. The impact and attack vectors of this issue are unknown. Recommendations: For versions prior to 4.45, update ...

CVE-2006-5237

CVE-2006-5237 describes an SQL injection in Blue Smiley Organizer prior to version 4.46. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected: Blue Smiley Organizer

CVE-2006-5237: Undefined Security Weakness

SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2006-5972 · Unknown · Blue Smiley Organizer

Name of the Vulnerable Software and Affected Versions: Blue Smiley Organizer versions prior to 4.46 Description: The issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions prior to 4.46, update to version 4.46 or later to resolve the issue...

CVE-2006-5238

Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors...

CVE-2006-5238

Blue Smiley Organizer prior to 4.45 contains an unspecified vulnerability in the file upload module. The affected component is the file upload subsystem, with unknown impact and attack vectors documented in CVE-2006-5238. The only concrete remediation provided across connected sources is to upgra...