GCVE - cpe:2.3:a:hoito:green_minute:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hoito:green_minute:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Hoito (`094c933a-8916-5abd-b792-17ea00e4c15d`)
Product	Green Minute (`bba86b31-7ede-5dfc-b10a-dd042bb1e910`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-1930`	vulnerable	2026-06-08 04:48:58.403199	Details available Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) huserid, (2) pituus, or (3) date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked (preg_match) before they are used in SQL-query... If someone decided to add SQL-injection stuff to certain parameter, they would see an error text, but only because _nothing_ was passed inside that parameter (to MySQL-database)." As allowed by the vendor, CVE investigated this report on 20060525 and found that the demo site demonstrated a non-sensitive SQL error when given standard SQL injection manipulations Published: 2006-04-20T18:00:00.000Z Updated: 2024-08-07T17:27:29.613Z Open on db.gcve.eu Reference links http://osvdb.org/ref/25/25207-dispute.txt http://www.osvdb.org/25207 http://hoito.org/en/products/ https://exchange.xforce.ibmcloud.com/vulnerabilities/25942 http://pridels0.blogspot.com/2006/04/green-minute-sql-inj-vuln.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.