Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Dale Mooney Subscribe
Filtered by product Contact Form
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-4612 1 Dale Mooney 1 Contact Form 2018-10-15 4.3 MEDIUM N/A
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.