CVE-2006-1930

Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) huserid, (2) pituus, or (3) date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked (preg_match) before they are used in SQL-query... If someone decided to add SQL-injection stuff to certain parameter, they would see an error text, but only because _nothing_ was passed inside that parameter (to MySQL-database)." As allowed by the vendor, CVE investigated this report on 20060525 and found that the demo site demonstrated a non-sensitive SQL error when given standard SQL injection manipulations

• http://hoito.org/en/products/
• http://osvdb.org/ref/25/25207-dispute.txt
• http://pridels0.blogspot.com/2006/04/green-minute-sql-inj-vuln.html
• http://www.osvdb.org/25207
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25942
• http://hoito.org/en/products/
• http://osvdb.org/ref/25/25207-dispute.txt
• http://pridels0.blogspot.com/2006/04/green-minute-sql-inj-vuln.html
• http://www.osvdb.org/25207
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25942

Published

Apr 20, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1924SQL injection vulnerability in functions/db_api.php in LinPH…
• CVE-2006-1925Directory traversal vulnerability in the editnews module (in…
• CVE-2006-1926SQL injection vulnerability in showtopic.php in ThWboard 2.8…
• CVE-2006-1927Cisco IOS XR, when configured for Multi Protocol Label Switc…
• CVE-2006-1928Cisco IOS XR, when configured for Multi Protocol Label Switc…
• CVE-2006-1929PHP remote file inclusion vulnerability in include/common.ph…
• CVE-2006-1931The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking so…
• CVE-2006-1932Off-by-one error in the OID printing routine in Ethereal 0.1…
• CVE-2006-1933Multiple unspecified vulnerabilities in Ethereal 0.10.x up t…
• CVE-2006-1934Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 a…
• CVE-2006-1935Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remo…
• CVE-2006-1936Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remot…