← Back

Dale Mooney

dale_mooney

3 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Moon Gallery
moon_gallery
1 CVE
Calendar Events
calendar_events
1 CVE
Contact Form
contact_form
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-4612
1Dale Mooney
1Contact Form
Apr 23, 2026
Aug 31, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam b...Show more
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.Show less
CVE-2007-4611
1Dale Mooney
1Calendar Events
Apr 23, 2026
Aug 31, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in viewevent.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-4610
1Dale Mooney
1Moon Gallery
Apr 23, 2026
Aug 31, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php.