VYPR

Dale Mooney Gallery

by Moonware

CVEs (2)

  • CVE-2007-4612Aug 31, 2007
    risk 0.00cvss epss 0.01

    CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.

  • CVE-2007-4610Aug 31, 2007
    risk 0.00cvss epss 0.01

    Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php.