Blue Smiley Organizer Unspecified SQL Injection Vulnerabilities

Bugtraq ID:	20417
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 09 2006 12:00AM
Updated:	Oct 11 2006 04:29PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Blue Smiley Blue Smiley Organizer 4.40 Blue Smiley Blue Smiley Organizer 4.21 Blue Smiley Blue Smiley Organizer 4.20
Not Vulnerable:	Blue Smiley Blue Smiley Organizer 4.46

Blue Smiley Organizer Unspecified SQL Injection Vulnerabilities

Blue Smiley Organizer is prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query.

A successful attack could allow an attacker to compromise the application, access or modify data, gain administrative access to the application, or exploit vulnerabilities in the underlying database implementation.

Versions prior to 4.46 are vulnerable to these issues.

Blue Smiley Organizer Unspecified SQL Injection Vulnerabilities

Attackers can exploit these issues via a web client.

Blue Smiley Organizer Unspecified SQL Injection Vulnerabilities

Solution:
The vendor has released an update to address these issues. Please see the references for more information.


Blue Smiley Blue Smiley Organizer 4.20

• Blue Smiley Blue Smiley Organizer 4.46
  http://freshmeat.net/redir/bluesmiley/65284/url_zip/download.php

Blue Smiley Blue Smiley Organizer 4.40

• Blue Smiley Blue Smiley Organizer 4.46
  http://freshmeat.net/redir/bluesmiley/65284/url_zip/download.php

Blue Smiley Blue Smiley Organizer 4.21

• Blue Smiley Blue Smiley Organizer 4.46
  http://freshmeat.net/redir/bluesmiley/65284/url_zip/download.php

Blue Smiley Organizer Unspecified SQL Injection Vulnerabilities

References:

• Blue Smiley Organizer (Blue Smiley)