CVE-2006-3170: Comscripts Cs-Forum

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse[] or readall parameter to index.php, which reveals the installation path in an error message.

Affected products

• Comscripts Cs-Forum: up to and including 0.81

Published 2006-06-23. Last modified 2026-06-16.