CVE-2006-1954

Published: Apr 21, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field.

Affected (1)

Products: Nfec.de: Rechnungszentrale

Nfec.de

1 product

Rechnungszentrale

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nfec.de Rechnungszentrale	Version v2_1.1.3

References (16)

http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html

Source: cve@mitre.org

http://secunia.com/advisories/19728

Source: cve@mitre.org

http://www.g-0.org/code/rz2-adv.html

Source: cve@mitre.org

ExploitURL Repurposed

http://www.osvdb.org/24752

Source: cve@mitre.org

http://www.securityfocus.com/bid/17588

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/1425

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25911

Source: cve@mitre.org

https://www.exploit-db.com/exploits/1699

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html