CVE-2006-1954

🗓️ 21 Apr 2006 10:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 57 Views🌐 WEB

SQL injection in authent.php4 in Nicolas Fischer RechnungsZentrale V2 1.1.

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2006-1954	21 Apr 200610:00	–	cvelist
Exploit DB	RechnungsZentrale 2 1.1.3 - 'Authent.php4' SQL Injection	18 Apr 200600:00	–	exploitdb
EUVD	EUVD-2006-1954	7 Oct 202500:30	–	euvd
NVD	CVE-2006-1954	21 Apr 200610:02	–	nvd
Prion	Sql injection	21 Apr 200610:02	–	prion
Positive Technologies	PT-2006-2938 · Unknown · Rechnungszentrale V2	21 Apr 200600:00	–	ptsecurity

NVD

Node

nfec.de rechnungszentraleMatchv2_1.1.3

Source	Link
vupen	www.vupen.com/english/advisories/2006/1425
archives	www.archives.neohapsis.com/archives/bugtraq/2006-04/0384.html
secunia	www.secunia.com/advisories/19728
osvdb	www.osvdb.org/24752
g-0	www.g-0.org/code/rz2-adv.html
securityfocus	www.securityfocus.com/bid/17588
exploit-db	www.exploit-db.com/exploits/1699
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/25911

Parameter	Position	Path	Description	CWE
User	request body	/authent.php4	SQL injection via User field in authent.php4 allows bypass/login and arbitrary SQL execution.	CWE-89
Password	request body	/authent.php4	SQL injection via User field in authent.php4 allows bypass/login and arbitrary SQL execution.	CWE-89

16 Jun 2026 22:24Current

8.5High risk

Vulners AI Score8.5

CVSS 25

EPSS0.01715

sql injection authent.php4 nicolas fischer rechnungszentrale nvd