Vulnerabilities (CVE)

Filtered by vendor Dale Mooney Subscribe
Filtered by product Contact Form
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-4612 1 Dale Mooney 1 Contact Form 2023-12-10 4.3 MEDIUM N/A
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.