CVE-2006-3171: Comscripts Cs-Forum

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php.

Affected products

• Comscripts Cs-Forum: up to and including 0.81

Published 2006-06-23. Last modified 2026-06-16.