PT-2026-21309 · Unknown · Blue Smiley Organizer

Cakes · Publicado 2026-02-20 · Atualizado 2026-02-20 · CVE-2019-25431

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions delpino73 Blue-Smiley-Organizer version 1.32

Description The software contains an SQL injection issue in the datetime parameter. Unauthenticated attackers can manipulate database queries by injecting SQL code through POST requests. This allows attackers to extract sensitive data using boolean-based blind and time-based blind techniques, or write files to the server using INTO OUTFILE statements.

Recommendations Apply a fix for version 1.32 to address the SQL injection issue in the datetime parameter.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-25431

Produtos afetados

Blue Smiley Organizer

Referências · 5

• 🔥 https://exploit-db.com/exploits/47550 · Exploit
• https://github.com/delpino73/Blue-Smiley-Organizer · Nota
• https://t.me/cveNotify/152676 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-25431 · Nota de Segurança
• https://vulncheck.com/advisories/delpino-blue-smiley-organizer-sql-injection-via-datetime · Nota