medium4.3
CVE-2007-4612
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in t…
Impact
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dale Mooney | Contact Form | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/3079
- http://www.securityfocus.com/archive/1/477851/100/0/threaded
- http://www.securityfocus.com/bid/25457
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36290
- http://securityreason.com/securityalert/3079
- http://www.securityfocus.com/archive/1/477851/100/0/threaded
- http://www.securityfocus.com/bid/25457
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36290