CVE-2006-3171

CVE-2006-3171 describes a CRLF injection vulnerability in CS-Forum versions prior to 0.82, allowing remote attackers to inject arbitrary email headers. This is achieved by including a newline character in the email parameter of the ajouter.php script. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and potential for partial integrity impact, but no confidentiality or availability impact. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.