VULNERABILITY INTELLIGENCE
CVE-2006-0727
CVSS score7.5 HIGH
EPSS probability2.14%
CISA KEVNot currently listed
Published2006-02-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some environments that use CPG-Nuke Dragonfly CMS, allows remote attackers to trigger path disclosure from a SQL syntax error, and possibly execute arbitrary SQL commands, via certain query data, probably involving the profile name.