CVE-2006-0727

HIGH 7.5CVE-2006-0727 · Published 16/02/2006 · updated 16/06/2026

In short

CVE-2006-0727 is a HIGH (CVSS 7.5) vulnerability affecting df msanalysis (musox).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 82.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
df msanalysis musox	`= 1.0.1`	No fix yet

Description

SQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some environments that use CPG-Nuke Dragonfly CMS, allows remote attackers to trigger path disclosure from a SQL syntax error, and possibly execute arbitrary SQL commands, via certain query data, probably involving the profile name.

References

dragonflycms.org/Forums/viewtopic/t=14751.html
dragonflycms.org/Forums/viewtopic/t=14877/postdays=0/postorder=asc/start=15.html
dragonflycms.org/cvs/html/includes/functions/linking.php
dragonflycms.org/cvs/html/includes/functions/linking.php
osvdb.org/23060
osvdb.org/23250
securityfocus.com/bid/16783
vupen.com/english/advisories/2006/0688

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free