system
Describe <CVE-2006-1954>.
user
What is <CVE-2006-1954>?
assistant
SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field..