CVE-2006-0221

Published: Jan 16, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network (DDSN) cm3 content manager (CM3CMS) allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password.

Affected (1)

Products: Ddsn: Cm3cms

Ddsn

1 product

Cm3cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ddsn Cm3cms	All versions

References (8)

http://www.osvdb.org/22696

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/421941/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16231

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24266

Source: cve@mitre.org

http://www.osvdb.org/22696

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/421941/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16231

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24266

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.