CVE-2006-0727

CVE-2006-0727 describes a SQL injection vulnerability in mstrack.php within MusOX DF MSAnalysis, often used with CPG-Nuke Dragonfly CMS. This flaw allows remote attackers to trigger path disclosure through SQL syntax errors and potentially execute arbitrary SQL commands, likely via manipulated profile name data. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, leading to potential compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.