CVE-2006-0727: Musox Df Msanalysis

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some environments that use CPG-Nuke Dragonfly CMS, allows remote attackers to trigger path disclosure from a SQL syntax error, and possibly execute arbitrary SQL commands, via certain query data, probably involving the profile name.

Affected products

• Musox Df Msanalysis: version 1.0.1 only

Published 2006-02-16. Last modified 2026-06-16.