SQL injection vulnerability in admin/default.asp in ASP Smiley 1.0 allows remote malicious users to execute arbitrary SQL commands via the Username field.
asp smiley asp smiley 1.0