What’s Vulnerable › Vulnerabilities

CVE-2019-25431: delpino73 Blue-Smiley-Organizer 1.32 SQL Injection via datetime

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-20 · updated 2026-06-17
• Weakness: CWE-89

Description

delpino73 Blue-Smiley-Organizer 1.32 contains an SQL injection vulnerability in the datetime parameter that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL code through POST requests to extract sensitive data using boolean-based blind and time-based blind techniques, or write files to the server using INTO OUTFILE statements.

Affected products

• delpino73 Blue-Smiley-Organizer: 1.32

References

• https://github.com/delpino73/Blue-Smiley-Organizer
• https://www.exploit-db.com/exploits/47550
• https://www.vulncheck.com/advisories/delpino-blue-smiley-organizer-sql-injection-via-datetime

Get alerted when CVE-2019-25431 or the next vulnerability affects your stack