What’s Vulnerable › Vulnerabilities

CVE-2006-0221

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-01-16 · updated 2026-06-16

Description

SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network (DDSN) cm3 content manager (CM3CMS) allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password.

Affected products

• Ddsn Cm3Cms: all versions

References

• http://www.osvdb.org/22696
• http://www.securityfocus.com/archive/1/421941/100/0/threaded
• http://www.securityfocus.com/bid/16231
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24266
• http://www.osvdb.org/22696
• http://www.securityfocus.com/archive/1/421941/100/0/threaded
• http://www.securityfocus.com/bid/16231
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24266

Get alerted when CVE-2006-0221 or the next vulnerability affects your stack