CVE-2007-4612

Published: Aug 31, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.

Affected (1)

Products: Dale Mooney: Contact Form

Dale Mooney

1 product

Contact Form

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dale Mooney Contact Form	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://securityreason.com/securityalert/3079

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/477851/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25457

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36290

Source: cve@mitre.org

http://securityreason.com/securityalert/3079

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/477851/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25457

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/36290

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.