Filtered by vendor Dale Mooney Subscriptions
Filtered by product Contact Form Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2007-4612 1 Dale Mooney 1 Contact Form 2024-11-21 N/A
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.