CVE-2006-1081

SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the email parameter.

• http://hamid.ir/security/nexus.txtExploit, Vendor Advisory
• http://secunia.com/advisories/19089Vendor Advisory
• http://securityreason.com/securityalert/536
• http://securitytracker.com/id?1015715
• http://www.securityfocus.com/archive/1/426575/100/0/threaded
• http://www.securityfocus.com/bid/16915
• http://www.vupen.com/english/advisories/2006/0809
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25017
• http://hamid.ir/security/nexus.txtExploit, Vendor Advisory
• http://secunia.com/advisories/19089Vendor Advisory
• http://securityreason.com/securityalert/536
• http://securitytracker.com/id?1015715
• http://www.securityfocus.com/archive/1/426575/100/0/threaded
• http://www.securityfocus.com/bid/16915
• http://www.vupen.com/english/advisories/2006/0809
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25017

Published

Mar 9, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1075Format string vulnerability in the visualization function in…
• CVE-2006-1076SQL injection vulnerability in index.php, possibly during a …
• CVE-2006-1077Multiple cross-site scripting (XSS) vulnerabilities in the c…
• CVE-2006-1078Multiple buffer overflows in htpasswd, as used in Acme thttp…8.4
• CVE-2006-1079htpasswd, as used in Acme thttpd 2.25b and possibly other pr…
• CVE-2006-1080Cross-site scripting (XSS) vulnerability in login.php in Gam…
• CVE-2006-1082Multiple cross-site scripting (XSS) vulnerabilities in phpAr…
• CVE-2006-1083Multiple directory traversal vulnerabilities in PHP-Stats 0.…
• CVE-2006-1084Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 …
• CVE-2006-1085admin.php in PHP-Stats 0.1.9.1 and earlier allows remote att…
• CVE-2006-1086Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-1087Direct static code injection vulnerability in the modify_con…