Vulnerabilities > CVE-2006-3171 - Remote Security vulnerability in Cs-Forum

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
comscripts

Summary

CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php.

Vulnerable Configurations

Part Description Count
Application
Comscripts
1