CVE-2006-4505

CVE-2006-4505 describes a CRLF injection vulnerability in NX5Linx 1.0, specifically within the links.php script. This flaw allows remote, unauthenticated attackers to inject arbitrary HTTP headers through the 'url' parameter, leading to HTTP response splitting attacks. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or having Metasploit/Nuclei modules, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.