7.5
CVE-2006-0221
- EPSS 1.21%
- Veröffentlicht 16.01.2006 21:03:00
- Zuletzt bearbeitet 16.06.2026 22:20:07
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network (DDSN) cm3 content manager (CM3CMS) allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.21% | 0.646 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://www.osvdb.org/22696
http://www.securityfocus.com/archive/1/421941/100/0/threaded
http://www.securityfocus.com/bid/16231
https://exchange.xforce.ibmcloud.com/vulnerabilities/24266