CVE-2006-6541: PHP Animated Smiley Generator

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in signer/final.php in warez distributions of Animated Smiley Generator allows remote attackers to execute arbitrary PHP code via a URL in the smiley parameter. NOTE: the vendor disputes this issue, stating that only Warez versions of Animated Smiley Generator were affected, not the developer-provided software: "Legitimately purchased applications do not allow this exploit.

Affected products

• PHP Animated Smiley Generator: any version

Published 2006-12-14. Last modified 2026-06-16.