Filtered by vendor Dale Mooney Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2007-4612 1 Dale Mooney 1 Contact Form 2024-11-21 N/A
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.
CVE-2007-4611 1 Dale Mooney 1 Calendar Events 2024-11-21 N/A
SQL injection vulnerability in viewevent.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-4610 1 Dale Mooney 1 Moon Gallery 2024-11-21 N/A
Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php.